GraphQL can be challenging, and not only for beginners. The reason for this is often that it's so tempting to do the wrong thing. In this session, I will walk you through the various challenges of building production-ready applications with GraphQL. We will discuss the differences between a public GraphQL server and a private GraphQL server. I will show the most common mistakes people encounter with GraphQL and how to tackle them.

In this talk, we will look at persisted operations, rate-limiting, introspection security, the right defaults for paging, errors, and many more aspects. This talk is suitable for you whether you are a GraphQL server or client implementer or just a user of GraphQL. After this session, you should have a solid understanding of how to put GraphQL into production in a secure way.

Are you running a GraphQL API in production? Have you thought about securing it? Well, you probably should!

Join Laurin on teaching about possible solutions for securing GraphQL APIs, whether you are building an internal or public graph, he will have you covered using open source solutions from the GraphQL ecosystem! After this talk you will for sure be an expert on query complexity analysis and trusted documents!

From the initial consideration to implementing a federated model. Learn how domain-driven design has influenced American Express practical approach and helped us in developing a big GraphQL Federated API also revamping the quality of our APIs.