GraphQL is a great new technology. It fills many gaps the REST leaves. However, there are challengs with GraphQL. One of those challenges are authorization and authentication.
“Organizations which design systems … are constrained to produce designs which are copies of the communication structures of these organizations.” – Melvin Conway