DEV Community

Discussion on: GraphQL Recipes (V2) - Building APIs with GraphQL Transform

Collapse
 
rosswilliams profile image
rosswilliams

Looking at the expanded schema won't tell you that subscriptions don't respect @auth rules. You would need to carefully read the documentation or understand the generated vtl. Going by published amplify projects, "those who may not be aware" seems to be a large group of people. Making these sample schemas secure would help inform people why subscriptions shouldn't be left on without understanding the consequences.