title: How to restrict anonymous users from GraphQL API endpoint?
body: <p>Django has two approaches.</p>
  
  <ol>
  <li><p>Regular DRF restricts user on Middleware level. So not logged in user doesn't reach anything.</p></li>
  <li><p>GraphQL, on contrary, uses "per method" approach. So middleware passes all the request and each method. But afterward method calls decorator.</p></li>
  </ol>
  
  <p>I want to implement 1st approach but for GraphQL. But in that case I need to open path for login mutation. How can I extract mutation name from payload?</p>