The Next Generation of APIs - GraphQL and its Security Landscape

No ratings

Presented at BSidesOklahoma 2019 by

Matthew Moses

The popularity of GraphQL APIs is on the rise. Open sourced by Facebook in 2015, GraphQL is a declarative API that provides a great deal of flexibility and optimization gains. This allows for new features to be rolled out very quickly without necessarily a lot of back end changes. Its agile aspect lends itself well to teams following the principles of continuous integration and deployment. For these reasons GraphQL is likely to see increased adoption through the industry in the coming years, likely to rival REST APIs. What does the threat landscape look like for GraphQL APIs? What potential pitfalls might a developer encounter? How does an organization effectively secure a GraphQL?