Views - Anonymous User

I was able to get around this by implementing a hook_ENTITY_TYPE_access and checking the views access level for the user.

function mymodule_view_access(View $view, $operation, $account) {
  $route_name = \Drupal::routeMatch()->getRouteName();

  if ($operation === 'view' && $route_name === 'graphql.query.core_schema') {
    return AccessResult::allowedIf($view->getExecutable()->access('page_1', $account));
  }

  return AccessResult::neutral();
}

By default we had to implement very strict access checking to not leak any data.

Therefor you have to implement your own access checks for entities or routes that you want to make visible in GraphQL.

The approach you did is therefore correct.

Automatically closed - issue fixed for 2 weeks with no activity.