Apply permission for all queries and mutations

[AlexanderKulia]

Hi. Is there a way to configure a permission that automatically applies to the whole schema?

My API is fully private, not a single query or mutation is meant to be public. Using strawberry.field(permission_classes=[IsAuthenticated]) for every field is a solution, but it's error-prone. If someone in the team forgets to add this permission in a new endpoint, it's automatically a security issue

Another solution would be to use FastAPI and mount Strawberry as a router like so: app.include_router(graphql_app, prefix="/graphql", dependencies=[Depends(check_auth)])

It works, but Sentry integration does not work properly with this setup. It does not recognize anything behind /graphql endpoint which makes automatic tracing impossible

[patrick91]

It works, but Sentry integration does not work properly with this setup. It does not recognize anything behind /graphql endpoint which makes automatic tracing impossible

mmh, that seems like a bug, can you tell me more? does it not show any tracing at all?

[AlexanderKulia]

I created another discussion for that topic here