Add graphql to api token documentation

[stb13579]

What does it do?

Add GraphQL API and link in the API token documentation to match the user guide documentation.

Why is it needed?

responding to a Discord user question.

Related issue(s)/PR(s)

Let us know if this is related to any issue/pull request

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated
documentation	✅ Ready (Inspect)	Visit Preview	💬 Add your feedback	Dec 22, 2022 at 9:38AM (UTC)
documentation-docu-mvp	❌ Failed (Inspect)			Dec 22, 2022 at 9:38AM (UTC)

[pwizla]

Thanks, Shaun.
How would one pass the API token along with the GraphQL query or mutation? I don't think it's documented somewhere, could you please check (maybe with @Convly) how it works?

[innerdvations]

Thanks, Shaun. How would one pass the API token along with the GraphQL query or mutation? I don't think it's documented somewhere, could you please check (maybe with @Convly) how it works?

It works with an authorization header, I believe in exactly the same way as the REST API, but I think it's worth repeating in the graphql documentation.

It might also be helpful to add a note for how to do that with the Graphql Playground. Here's an explanation: https://docs.wellline.com/wellline-recipes/timeline-service-graphql-api/using-the-graphql-playground-1

[gpene]

LGTM

[innerdvations]

Should this be at the ## level so that it doesn't fall under the "Users and Permissions Plugin" section, since API tokens are an alternate option to the plugin?

Although, I wonder if this could be combined or simplified somehow (maybe outside the scope of what you're doing, but a future note). That is, the authorization header works exactly the same whether it's a JWT or API Token. So we could have a section about "Adding an authorization header" that explains the bearer token is either an API Token, or the JWT returned from a login.

[stb13579]

You are correct, I fixed the header level.

On the second point, I agree and it is something we can revisit in the next quarter. We have been discussing a concepts section with @Aurelsicoko and one of the topics that I think we should cover early on is authentication/authorization.

[strapi-bot]

This pull request has been mentioned on Strapi Community Forum. There might be relevant details there:

https://forum.strapi.io/t/new-documentation-release-v4-5-5/24573/1