- All Implemented Interfaces:
- com.networknt.handler.MiddlewareHandler, io.undertow.server.HttpHandler
public class JwtVerifyHandler
extends Object
implements com.networknt.handler.MiddlewareHandler
This is the JWT token verifier for GraphQL. Given there is no OpenAPI spec available for
scopes, we have to verify the scope just based on query and mutation which is read and write.
Regarding to the authorization, GraphQL spec doesn't have anything built-in and it is
recommended to handle at the business logic layer. As we are trying to address the cross-cutting
concerns at middleware level within the framework, we don't want to inject anything extra into
the schema for authorization.
- Author:
- Steve Hu