GraphQL Security with Hasura
With Hasura Cloud, Hasura allows you to declaratively secure your GraphQL APIs in a few clicks.
Hasura Cloud allows for one to configure limits and restrict operations to prevent API performance issues.
This can be done by:
- Depth limiting: restricting the operation based on the depth of GraphQL query
- Node limiting: limiting the no. of GraphQL nodes
- Rate limiting: limiting the no. of GraphQL operations per minute
Hasura's security features have:
- allow lists
- service level security
authorization
More details about GraphQL security with Hasura can be found here.