---
id: 4115
title: "Design Considerations for Secure GraphQL APIs"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/design-considerations-for-secure-graphql-apis"
published_at: "2020-09-28T00:00:00Z"
tags: ["appsec", "api-security", "graphql", "ssrf", "authorization", "misconfiguration"]
phying_url: "https://phying.com/item/4115"
lang: en
---

# Design Considerations for Secure GraphQL APIs

## Summary

Jake Miller covers security risks in GraphQL deployments and migrations, including authorization flaws and SSRF in GraphQL-to-REST interoperability, plus baseline hardening controls.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2020-09-28T00:00:00Z
- **Original:** https://bishopfox.com/blog/design-considerations-for-secure-graphql-apis
- **Phying News:** https://phying.com/item/4115