Authentication - Slash graphql

Documentation
6

Hi @gja,

My use case is this - I have a backend API that will only access the database. We may move from Slash hosting to on prem in the future but for now we are using slash. I don’t want to deal with ACLs just yet as that seems very nice but will slow us down in the beginning.

I’m confused by the multiple layers of authentication:

  1. Slash API Key generated from the website
  2. JWT based authentication defined in the schema (e.g. Auth0)

Are these two completely separate? I would like to only access the database using the Slash API token and not use JWT if possible. Is there a way to do just that?

I have this piece in my schema (with sensitive info removed) which seems to at least require the JWT however I would like it to only require the token.
Dgraph.Authorization {"ClosedByDefault":true}

Thank you!
Nick