GraphQL can be challenging, and not only for beginners. The reason for this is often that it's so tempting to do the wrong thing. In this session, I will walk you through the various challenges of building production-ready applications with GraphQL. We will discuss the differences between a public GraphQL server and a private GraphQL server. I will show the most common mistakes people encounter with GraphQL and how to tackle them.

In this talk, we will look at persisted operations, rate-limiting, introspection security, the right defaults for paging, errors, and many more aspects. This talk is suitable for you whether you are a GraphQL server or client implementer or just a user of GraphQL. After this session, you should have a solid understanding of how to put GraphQL into production in a secure way.

In this talk, we're unpacking GraphQL Fusion, a new approach that makes building distributed GraphQL APIs easier. We'll explore how this approach lets your teams work independently by owning different parts of the company's graph and cover how you can reshape subgraphs to follow your company's rules. Come learn about this powerful tool that brings efficiency and customization to your GraphQL operations.

This ad-hoc talk is just Benjie (and Michael Staib from ChilliCream!) riffing about some of the work that's going on in the GraphQL Working Groups currently. Topics covered include:

When caching is done correctly, you never go down, save significant infrastructure costs, and have globally unbeatable performance. However, caching is known as one of the two hardest problems in computer science for a reason. It turns out that GraphQL and Federation make caching a breeze. Max, the CEO at Stellate, shares what they have learned from caching hundreds of federated GraphQL APIs at scale that you can apply to your API to make them indestructible.