Walkthrough: Enabling and authorizing requests to the Authoring and Management API

Before using GraphQL, you must enable it in your settings.

To enable GraphQL:

• In a Sitecore configuration patch file, add the following setting:

  <setting name="GraphQL.Enabled" value="true" />

To authorize HTTP requests to perform operations against the Authoring and Management API endpoint, you must obtain an access token.

To obtain an access token:

1. Configure a controller that retrieves a Bearer type access token from the Sitecore Identity Server.
2. Navigate to the controller in a browser. If authentication is successful, the access token is displayed on the page.
3. Copy the Access token value.

All HTTP requests to the Authoring and Management API endpoint must be authorized. Tools like Postman or Insomnia can be used to send and validate these requests

To authorize your HTTP requests:

• Add the HTTP Authorization header with the Bearer authentication scheme to your request headers. Replace the <access-token> placeholder with the value of the access token. For example:

  {
      headers: [
          { "Authorization": "Bearer <access-token>" }
      ]
  }

• To test the authorization for your HTTP request, verify your setup by running a query. For example:

   query {
      sites{
          name
      }
  }