Authorization
Authorization Overview
Conduit supports multiple authorization strategies.
These mechanisms allow you to restrict access to read, write, or mutate data using
environment variables, database-backed tokens, or a no-op mode that performs no
authorization checks.
Authorization Overview
Authorization behavior is controlled through the auth section of your configuration file. Conduit supports the following authorization modes:
Each mode can be enabled independently. When all modes are disabled or misconfigured, Conduit automatically falls back to No‑Op Authorization, which allows all requests.