Exposing GraphQL APIs Securely with Azure APIM: A Step-by-Step Guide🚀

 

Are you looking to expose GraphQL APIs securely? Azure API Management (APIM) provides robust support for GraphQL, making it easier to manage and secure your APIs.

 

In APIM, there are 2 options available to expose GraphQL api.

  •        Pass-Through GraphQL: Proxy an existing GraphQL service (hides original service details)
  •        Synthetic GraphQL: Build a GraphQL API on top of REST APIs/other services

This article covers Pass-Through GraphQL.


Step 1: Create a GraphQL API in APIM

- Azure portal > APIM > APIs > + Add API > GraphQL


Step 2: Import GraphQL Schema

  •             Provide GraphQL endpoint, API URL suffix, display name
  •            APIM auto-fetches schema (if endpoint is accessible). If it does not do auto fetches, choose to import a schema file(*.graphql). Click on Create button. 

Please Note: In case of endpoint. If apim does not auto fetches the schema then check if :

o   Url needs auth

o   Is there any network APIM restrictions

o   Invalid Url

o   Schema not publicly accessible

o   CORS issue


APIM will parse the schema and detect queries/mutations.



After importing/fetching schema, UI will look like this:

                                             

Step 3: Set Policies for Security & Management 🔒

Add policies (auth, rate limiting, etc.) in API Policies tab


Step 4: Test the API

Use the Test tab to run queries/mutations





💡 Example Query:

Within Query Editor:

query {

    comment(id: "id") {

        authorId

        id

    }

}

 

Within Query Variable:

{

    "id":"user123"

}

 

💡 Summary: This guide showed how to configure Pass-Through GraphQL in APIM. Try it out and level up your API management! 





Comments

Post a Comment

Popular posts from this blog

Building Stateful Agentic AI Workflows with Azure Standard Logic Apps

Introduction: What are Agentic AI Workflows in Azure Logic Apps? Azure Standard Logic Apps are no longer just about "connecting APIs". With AI, they can now act like agents - making decisions, learning, and running workflows with minimal human input. In this post, we’ll break down how to build Stateful Agentic AI Workflows using Azure Standard Logic Apps, when to use them, and the pros/cons you should know before going live.   1. Two Types of Agentic AI in Logic Apps When building an AI agent in Logic Apps, you have 2 main patterns: A. Autonomous Agent 🤖 Think " set it and forget it ". What it does: Operate independently with minimal human intervention. Make decisions based on goals + data.  Best for: Repetitive, well-defined tasks like data processing, scheduled jobs, background automation. Key traits: Self-directed, no constant prompts needed, clear objective. B. Conversational Agent 💬 Think " ChatGPT inside your workflow ". What it does: Talks with...
Read more

Build a GraphQL API with Synthetic GraphQL in Azure APIM!

Image
We've already nailed PassThrough GraphQL in APIM 🚀( https://tech-sakshimittal.blogspot.com/ ). Now, let's dive into Synthetic GraphQL💪 Why Synthetic GraphQL? 🤔 It's perfect when you want to: - Aggregate data from multiple sources (REST APIs, Azure SQL, Azure CosmosDB) - Simplify complex backend interactions - Give clients flexible query power 😎 - Transform or shape existing REST APIs without changing them - Expose a more query-friendly interface to clients 👉  Data Sources In this demo, we've set up 3 data sources whose responses will be mapped to GraphQL schema fields. 1. Azure SQL 2. REST API 3. Azure CosmosDB  👉 DataSource1: Azure SQL [dbo].[bookInfo] In Azure SQL database, a table is created ' [dbo].[bookInfo]'. Here is the data: 👉  DataSource 2: BookStore REST API        These are the REST API endpoints we'll connect to GraphQL via APIM . GET /books → Fetch all books 📚(list of all books)        This endpoint returns...
Read more