DEV Community

Play Button Pause Button
Vladimir Novick for Hasura

Posted on

Securing Hasura GraphQL Endpoint with Admin Secret key

Leaving your GraphQL endpoint unsecured is a bad idea, so in this video we will walk through how to secure your GraphQL endpoint with a secret key.

Top comments (2)

aplogman profile image
Austin Plogman • Edited

How do you prevent your url and access key from being shown in the network tab on Chrome dev tools? My website does not require a login or register so I am not sure how the authentication will work to prevent people from messing with your database.

vladimirnovick profile image
Vladimir Novick

Access key should be used only for server to server communication cause you are right it will be shown in network tab. I explained more about auth here