{"action":"created","issue":{"url":"https://api.github.com/repos/calebmer/postgraphql/issues/83","repository_url":"https://api.github.com/repos/calebmer/postgraphql","labels_url":"https://api.github.com/repos/calebmer/postgraphql/issues/83/labels{/name}","comments_url":"https://api.github.com/repos/calebmer/postgraphql/issues/83/comments","events_url":"https://api.github.com/repos/calebmer/postgraphql/issues/83/events","html_url":"https://github.com/calebmer/postgraphql/issues/83","id":164767880,"number":83,"title":"Where JWT token is read from and how to use it with GraphiQL?","user":{"login":"meglio","id":282177,"avatar_url":"https://avatars.githubusercontent.com/u/282177?v=3","gravatar_id":"","url":"https://api.github.com/users/meglio","html_url":"https://github.com/meglio","followers_url":"https://api.github.com/users/meglio/followers","following_url":"https://api.github.com/users/meglio/following{/other_user}","gists_url":"https://api.github.com/users/meglio/gists{/gist_id}","starred_url":"https://api.github.com/users/meglio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/meglio/subscriptions","organizations_url":"https://api.github.com/users/meglio/orgs","repos_url":"https://api.github.com/users/meglio/repos","events_url":"https://api.github.com/users/meglio/events{/privacy}","received_events_url":"https://api.github.com/users/meglio/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-07-11T06:22:26Z","updated_at":"2016-07-11T13:38:24Z","closed_at":null,"body":"In the documentation, it says:\r\n\r\n> After a JSON Web Token has been verified and decoded, the resulting claims will be serialized to the PostgreSQL database in two ways:\r\n\r\nHowever, it is not clear where the JWT token is read from?\r\n\r\nAlso, since I'm using database roles to limit access to the database objects, it would also be very useful to use JWT with GraphiQL - this would allow me to easily test whether all permissions are set correctly for my queries for various roles. Any idea how to do it?"},"comment":{"url":"https://api.github.com/repos/calebmer/postgraphql/issues/comments/231736380","html_url":"https://github.com/calebmer/postgraphql/issues/83#issuecomment-231736380","issue_url":"https://api.github.com/repos/calebmer/postgraphql/issues/83","id":231736380,"user":{"login":"eugenehp","id":1857263,"avatar_url":"https://avatars.githubusercontent.com/u/1857263?v=3","gravatar_id":"","url":"https://api.github.com/users/eugenehp","html_url":"https://github.com/eugenehp","followers_url":"https://api.github.com/users/eugenehp/followers","following_url":"https://api.github.com/users/eugenehp/following{/other_user}","gists_url":"https://api.github.com/users/eugenehp/gists{/gist_id}","starred_url":"https://api.github.com/users/eugenehp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eugenehp/subscriptions","organizations_url":"https://api.github.com/users/eugenehp/orgs","repos_url":"https://api.github.com/users/eugenehp/repos","events_url":"https://api.github.com/users/eugenehp/events{/privacy}","received_events_url":"https://api.github.com/users/eugenehp/received_events","type":"User","site_admin":false},"created_at":"2016-07-11T13:38:24Z","updated_at":"2016-07-11T13:38:24Z","body":"@calebmer  made a great point.\r\n\r\n@meglio I would check the context of the graphql server where you pass headers, and then match them to whatever you have in your authorisation layer JWT, tokens, passport, etc."}}
{"actor":{"display_login":"eugenehp"}}