GraphQL - Mutation authorization
graphql-ruby.org