How to implement authentication on GraphQL endpoint? | Community
Skip to main content
Level 2
September 7, 2022
Solved

How to implement authentication on GraphQL endpoint?

  • September 7, 2022
  • 1 reply
  • 1144 views

We have implemented GraphQL endpoint in AMS environment (AEM 6.5.10).I want to set-up authentication on GraphQL endpoint before sharing it with third-party Apps.

There are lot of articles/how-to on AEM as a cloud Service on generating JWT and adding Authorization header but there is no document specific to AEM 6.5.10.

Any help will be much appreciated.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by joerghoh

If you want to implement that on the publish layer, you should use CUGs (closed user groups). 

 

Check https://experienceleague.adobe.com/docs/experience-manager-learn/assets/advanced/closed-user-groups.html for a starter. It's focussed on Assets, but it is basically the same for sites.

1 reply

joerghoh
Adobe Employee
joerghohAdobe EmployeeAccepted solution
Adobe Employee
September 9, 2022

If you want to implement that on the publish layer, you should use CUGs (closed user groups). 

 

Check https://experienceleague.adobe.com/docs/experience-manager-learn/assets/advanced/closed-user-groups.html for a starter. It's focussed on Assets, but it is basically the same for sites.

arvindk091986
Level 2
April 17, 2023

Is there a way to establish authentication for a public facing site on Publish, where we are not sure about the users on publish side ? I am guessing, CUG works for the case where we know who the users are and apply the restriction/authentication based on that.

I am looking into something similar and checking on a solution to see if we have a way to restrict the users accessing the GraphQL endpoint from Publish side. That being said, we are unsure about the users visiting that site. Appreciate your response. 

joerghoh
Adobe Employee
Adobe Employee
May 1, 2023

What do you mean with "we are not sure about the users on publish side"? If you want to apply restrictions on visiting users, you need to define criteria on which you want to base these restrictions. Having an account on the system is a very simple one.