It goes over several ways to secure your endpoints, along with pros and cons for each.
https://www.howtographql.com/advanced/4-security/