Message Title

David Martin created an issue

provision keycloak and configure the showcase app to use it
after login, send the authentication token with all graphql requests from the android app
on the server, use the token to lookup user roles in keycloak and verify authZ checks can be done in graphql server resolvers
investigate how generic an authZ configuration can be made, regardless of what the schema definition is e.g. can tables, rows, fields be locked down by the developer simply setting roles in keycloak?

This message was sent by Atlassian JIRA