I've been working on a series of how to do GraphQL on Azure. I've just published the 7th part, in which we look at how to add security to a GraphQL server.

GraphQL on Azure: Part 7 - Server-side Authentication