DEV Community

Play Button Pause Button
Vladimir Novick for Hasura

Posted on

Securing Hasura GraphQL Endpoint with Admin Secret key

Leaving your GraphQL endpoint unsecured is a bad idea, so in this video we will walk through how to secure your GraphQL endpoint with a secret key.

Top comments (2)

Collapse
 
aplogman profile image
Austin Plogman • • Edited

How do you prevent your url and access key from being shown in the network tab on Chrome dev tools? My website does not require a login or register so I am not sure how the authentication will work to prevent people from messing with your database.

Collapse
 
vladimirnovick profile image
Vladimir Novick •

Access key should be used only for server to server communication cause you are right it will be shown in network tab. I explained more about auth here dev.to/hasurahq/hasura-authenticat...