Hacker News new | ask | show | jobs
by carsongross 3784 days ago
Great question!

No, no it is not in the spec, as of February 15th, 2016:

http://archive.is/quwUd

Update: I think Peter Hunt is talking about Facebook's internal server-side implementation of GraphQL. That's the only way his comments make any sense given what's publicly available.
1 comments
peterhunt 3784 days ago
It doesn't belong in the spec, it belongs in the implementation. But yes, the reference implementation (graphql-js) should probably be updated to demonstrate access control.
link
carsongross 3784 days ago
> I think you misunderstand what GraphQL is.

> For each node type and edge type in the graph, you provide a required canSee() function which controls its visibility.

> It doesn't belong in the spec

_kek_

Am I on candid camera?

link