See requirement: https://github.com/mercurius-js/mercurius/issues/343 And an existing plugin: https://mercurius.dev/#/docs/plugins?id=mercurius-auth We may provide an authorization plugin powered by Casbin.