Trusted Documents | benjie.dev

A standard way to prevent malicious GraphQL documents being issued to a GraphQL endpoint by only allowing documents that you trust (written by your developers, passing your CI checks, etc). At client build time, make the documents available to the server and receive an identifier for each; at run time issue this identifier to the server and have it look up the associated document.