How do I implement API key authentication in GraphQL?

How do I implement API key authentication in GraphQL?

To implement API key authentication in GraphQL, you can use middleware to check for the API key in the request headers.

What libraries can I use for this in Node.js?

You can use libraries like Express.js along with Apollo Server or GraphQL Yoga to handle API key authentication.

Can you show me a code example?

Sure! Here's a simple example using Express and Apollo Server:

const { ApolloServer } = require('apollo-server-express');
const express = require('express');

const app = express();

const server = new ApolloServer({
  typeDefs,
  resolvers,
  context: ({ req }) => {
    const apiKey = req.headers['x-api-key'];
    if (apiKey !== 'your-secret-api-key') {
      throw new Error('Unauthorized');
    }
    return {};
  },
});

server.applyMiddleware({ app });
app.listen({ port: 4000 }, () => {
  console.log(`Server ready at http://localhost:4000${server.graphqlPath}`);
});

What should I do if the API key is compromised?

If your API key is compromised, you should revoke it immediately and issue a new one. Also, consider implementing rate limiting and monitoring for unusual activity.