Noice! going to need to get my feet dirty with this goopy GraphQL stuff sometime soon.

I'm a total newb with GraphQL, I'm going to be diving into a crash-course in the office over the next few days (I got a colleague screaming that we should run our ArticleService system over graphql), but how easy/hard would it be to implement either single-user or multi-user authentication (or some form of token authentication) into the GraphQL plugins y'all have been building?

I'm quite trusty when it comes to localhost, but exposing my database (and perhaps even write access) to wifi or over the internets... I don't know.