Apollo Router to Subgraph Authentication Self Hosted

Help
1

Hello,
I am looking for a solution for server-side authentication between the Apollo router and self-hosted subgraphs. I see there is documentation for this for AWS hosted subgraphs using SigV4 but how would I accomplish this without using AWS?

Reference: Subgraph Authentication

2

A couple of other options:

  1. Use mTLS
  2. I can’t find a documented pattern for it, but all of our subgraph templates come set up to check a header from the router that contains a shared secret. This is a one-sided auth, the subgraph verifies that it’s the router that’s calling.
1 Like