# Authorization in GraphQL

DevFeed: [Authorization in GraphQL](<https://devfeed.tech/articles/authorization-in-graphql-23229.md>)

Original publisher: [Read original article](<https://www.apollographql.com/blog/authorization-in-graphql>)

Author: Jake Dawkins

Published: 2018-05-15T19:32:09Z

Content type: tutorial

Language: en

Sources: [Apollo Blog](<https://devfeed.tech/sources/apollo-blog.md>)

Topics: [Authorization](<https://devfeed.tech/topics/authorization.md>), [GraphQL](<https://devfeed.tech/topics/graphql.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [API](<https://devfeed.tech/topics/api.md>), [apollo-server](<https://devfeed.tech/topics/apollo-server.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [apollo](<https://devfeed.tech/tags/apollo.md>), [auth](<https://devfeed.tech/tags/auth.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [backend](<https://devfeed.tech/tags/backend.md>), [graphql](<https://devfeed.tech/tags/graphql.md>)

## AI overview

This article explains how authentication and authorization differ in GraphQL and demonstrates approaches for recognizing users and controlling access through schema authorization, resolvers, and systems outside GraphQL.

## Source excerpt

Update: Auth now available in Apollo Router Apollo has shipped our new authentication and authorization features as built-in Router features. Checkout the launch post: At some point (probably pretty early on) when building a GraphQL endpoint, you'll probably have to face the question of how to control who can see and interact with the data in your API.