The Root of Auth Things

This talk is an exploration into authorization (AuthZ) and the models we use to think about permissions in GraphQL. A lot of in depth implementations mainly tackle role-based or attribute-based model systems.

This talk goes down the rabbit hole of relationship-based org graph-based permission models and how we leverage it in conjunction with graphql to improve the authorization story for distributed and federated graphs.