GraphQL can be challenging, and not only for beginners. The reason for this is often that it’s so tempting to do the wrong thing. In this session, I will walk you through the various challenges of building production-ready applications with GraphQL. We will discuss the differences between a public GraphQL server and a private GraphQL server. I will show the most common mistakes people encounter with GraphQL and how to tackle them. In this talk, we will look at persisted operations, rate-limiting, introspection security, the right defaults for paging, errors, and many more aspects. This talk is suitable for you whether you are a GraphQL server or client implementor or just a user of GraphQL. After this session, you should have a solid understanding of how to put GraphQL into production in a secure way. Michael Staib is a member of the GraphQL technical steering committee, a Microsoft MVP, and the author of the Hot Chocolate project (https://github.com/ChilliCream/hotchocolate), a platform for building GraphQL servers and clients in .NET. This open-source project has been his main focus for the last couple of years. Apart from his work in the open-source community, Michael works as a consultant to help companies move to GraphQL. You can tune into the Hot Chocolate project on youtube: https://www.youtube.com/@chillicream