How to implement authentication on GraphQL endpoint?

[coolclassic]

We have implemented GraphQL endpoint in AMS environment (AEM 6.5.10).I want to set-up authentication on GraphQL endpoint before sharing it with third-party Apps.

There are lot of articles/how-to on AEM as a cloud Service on generating JWT and adding Authorization header but there is no document specific to AEM 6.5.10.

Any help will be much appreciated.

[Jörg_Hoh · Accepted solution]

If you want to implement that on the publish layer, you should use CUGs (closed user groups). 

Check https://experienceleague.adobe.com/docs/experience-manager-learn/assets/advanced/closed-user-groups....for a starter. It's focussed on Assets, but it is basically the same for sites.