When building an authentication system on top of PostGraphQL, you’ll need to add an anonymous role for all requests that don’t assert their own role in a JWT. Before, the anonymous role was the same as the role you would use to authenticate with the database, now that default can be overridden with the --anonymous-role
command line option! Just do the following:
postgraphql postgres://auth_user@localhost:5432/mydb --anonymous-role anonymous_role
For more information about roles in PostgreSQL and their “role” in PostGraphQL read the documentation article titled “The Anonymous Role”.
Bugfixes
PostGraphQL has also had a number of patch releases since the last minor release.