Don't Panic - A Developer's Guide to Building Secure GraphQL APIs

Explore a comprehensive conference talk on building secure GraphQL APIs. Learn about the increasing adoption of GraphQL in production and the potential security risks it introduces. Discover best practices for designing secure GraphQL APIs through case studies and OWASP risk analysis. Gain insights into proactively planning for threats earlier in the API lifecycle. Compare the security challenges of GraphQL APIs to other popular API specifications and standards. Dive into topics such as over-fetching risks, introspection, field suggestions, denial of service attacks, batch query attacks, recursive relationships, SQL injection, and authorization. Understand the importance of custom scalars, persistent queries, and the current state of GraphQL development. Access valuable resources and learn about the GraphQL Foundation's efforts in promoting secure API development.