Allow to have private and public tokens for single client

[iBobik]

Your use case

I have private token for privileged calls in server functions, public token to unauthenticated calls on a frontend which can be upgraded to user's personal token by login.

All this is for single API, just different permissions.

Introspection needs to use private token to see whole schema (public tokens see only entities and mutations they have access to). SSR needs to receive public token unless user's token was received in cookie.

The solution you'd like

Client config like:

default: {
  host: process.env.GQL_HOST,
  token: process.env.GQL_TOKEN,
  publicToken: 'hardcoded_public_token',
  ssrToken: 'hardcoded_public_token',
},

or:

default: {
  host: process.env.GQL_HOST,
  token: process.env.GQL_TOKEN,
  retainToken: 'hardcoded_public_token',
},

Possible alternatives

Currently I have to write a lot of custom logic in a gql:auth:init hook.

Additional information

No response