Wouldn't it be better to authenticate outside GraphQL?

[hisapy]

Currently, we're authenticating; login and logout, using auth mutations, then the GraphQL schema is responsible evaluate what to do if there is no :current_user in the GraphQL context in the resolvers.

Perhaps we could use Guardian.Plug.EnsureAuthenticated to avoid clients with no authentication to reach the GraphQL schema at all.

🤔