Add restrictions to WP GraphQL endpoint

[benslv]

Need to investigate if there's some way for us to limit which origins/URLs are allowed to request data from our WordPress database since, at the moment anybody anywhere could query the entire database for its articles and use them wherever they want, which is a bit iffy.

I think there's a setting in one of the plugins to restrict this, so it's worth taking a look. Another option could be to require a password which you include in the request body. Could then add this as an environment variable in GitHub Pages and use it at build time without it being exposed on the live site.

[benslv]

Here's a link to the documentation surrounding authenticating your requests: https://www.wpgraphql.com/docs/authentication-and-authorization/