Endpoints
| Endpoint | Description |
|---|---|
POST /graphql | Main GraphQL API |
POST /graphql-subscription | GraphQL subscriptions (WebSocket) |
Authentication
GraphQL requests are authenticated using the same JWT guards as REST endpoints. Include the token in theAuthorization header:
Resolvers
The GraphQL API includes the following resolvers:| Resolver | Description |
|---|---|
CustomerResolver | Customer profile queries |
BillingResolver | Billing and subscription mutations |
OTPCodeResolver | One-time password authentication |
Rate Limiting
GraphQL operations are rate limited viaGqlThrottlerGuard backed by Redis. Limits are applied per-user and per-IP.
Custom Scalars
The API uses custom GraphQL scalars for:DateTime- ISO 8601 date-time stringsJSON- Arbitrary JSON dataUUID- UUID v4 strings