Authentication and Authorization

Authentication with Hasura can be implemented using the following:

• JWT
• Webhooks
• Unauthenticated public access

In all of these cases, it is important to configure an admin secret first.

Authorization with Hasura can be implemented using the following:

• Role-based permissions: per role, per schema, per table, per operation type
• Set role access rules (records and fields) for Insert, Select, Update, and Delete

Both Authentication and Authorization have been covered in our Hasura Basics tutorial. Do check that out.

Also, for the Slack model in this tutorial, we have the Slack Authorization tutorial talking about setting up role-based permissions from scratch.