Practical GraphQL - Become a GraphQL Ninja - Adding authorisation via GraphQL

The video tutorial explains how to implement token-based authentication in a GraphQL application. It covers storing tokens, creating a function to verify tokens, and integrating this verification into the context of an Apollo server. The tutorial also demonstrates how to use the Me object in resolvers to ensure only authenticated users can perform certain actions, such as creating a car. Finally, it includes testing and debugging the implementation to ensure it works correctly.

What is the purpose of the login mutation in GraphQL?

• To update user information

• To create a new user account

• To log a user in and return a token

• To delete a user account

Where is the token stored after a user logs in?

• In the server's database

• In the application's cache

• In the user's profile

• In the browser's local storage or cookies

What package is used to verify the token in the implementation?

• jsonwebtoken

• apollo-server

• graphql

• express

What happens if the token verification fails?

• The request is processed without authentication

• An error 'Session expired' is thrown

• A new token is generated

• The user is logged out

How is the verified user information added to the Apollo server context?

• By creating a new user object

• By adding it to the request headers

• By storing it in a global variable

• By using the 'me' property in the context

What is required for a user to create a car in the system?

• The user must have a premium account

• The user must have a verified email

• The user must be an admin

• The user must be logged in

What is automatically added to the cars table when a car is created?

• Car's price

• Car's color

• User ID

• User's email

What is the first step in the practical example provided?

• Registering a new user

• Verifying a token

• Logging in a user

• Creating a car

What must be included in the HTTP headers to successfully create a car?

• User's email

• Car's model

• X-Auth-Token

• User's password

What error is returned if a user tries to create a car without logging in?

• Not authenticated

• User not found

• Access denied

• Invalid token