Securing a graphQL API with Azure Active Directory

If you want to build a graphQL API in .NET right now, the most well-known options available are the graphQL.NET implementation and the HotChocolate one.   
 
I personally prefer HotChocolate over graphQL.NET, but in this post I won't be talking about how you can build a graphQL API, mainly because there are a lot of great examples online and writing another one seems meaningless.
Instead of that I'll be focusing on how you can secure it with AAD.  

The main talking points in my new post are going to be the following ones:

- How to secure a graphQL api using the Microsoft.Web.Identity nuget package.
- What are the introspection queries and how to secure them.
- How to call a protected graphQL api using the GraphQL.Client and the Microsoft.Web.Client nuget packages.

If you're interested take a look: https://www.mytechramblings.com/posts/securing-dotnet-graphql-api-with-aad/