The Complete Strapi™ Course with Plugins and Deployment - Applying an Auth Scope to GraphQL Operations

The video tutorial explains the process of handling a Post entity response, focusing on the importance of using an authenticated user to perform operations. It covers the login process using JWT tokens, setting up authorization and permissions for authenticated users, and ensuring that only users with the correct permissions can perform certain mutations. The tutorial also discusses the application of policies and middleware in GraphQL mutations, emphasizing the need for explicit permission settings.

What should be provided to ensure that only authenticated users can perform the mutation?

How can you block an operation for not authenticated users?

What is the final step needed to correctly shape the response?