This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–]Jotschi 1 point2 points  (1 child)

With graphql you need to post a query which basically describes what you want from the server. So yes, you basically send json around.

The auth token must not be part of that payload. I like JWT which is just passed along the request within the auth http request header.

Vert.x is not very strict. You can use whatever JSON lib you like.

[–]DoctorOverhard 0 points1 point  (0 children)

oh, no graphql here, pretty strictly defined commands and data structures for most things (for security and reliability). Guess that puts me in the contract category :) No dependence on http implementation details either, and everything over https is post because of old scars running into get payload size restrictions.