silverstripe-webpack/app/_config/base-graphql.yml

---
Name: webapp-base-graphql
After: graphqlconfig
---
SilverStripe\Control\Director:
  rules:
    'graphql': '%$SilverStripe\GraphQL\Controller.default'

SilverStripe\GraphQL\Controller:
  cors:
    Enabled: true
    Allow-Origin: '*'
    Allow-Headers: 'Authorization, Content-Type, Content-Language, apikey'
    Allow-Methods: 'GET, PUT, DELETE, OPTIONS, POST'
    #Allow-Credentials: 'true'
    Max-Age: 600 # 600 seconds = 10 minutes.

SilverStripe\GraphQL\Auth\Handler:
  authenticators:
    - class: App\GraphQL\APIKeyAuthenticator
      priority: 30

SilverStripe\GraphQL\Manager.default:
  properties:
    Middlewares:
      APIKeyMiddleware: App\GraphQL\APIKeyMiddleware

SilverStripe\GraphQL\Manager:
  schemas:
    default:
      types:
        member: 'App\GraphQL\MemberTypeCreator'
        page: 'App\GraphQL\PageTypeCreator'
        element: 'App\GraphQL\ElementTypeCreator'
      queries:
        readPages: 'App\GraphQL\PaginatedReadPagesQueryCreator'
        readMembers: 'App\GraphQL\ReadMembersQueryCreator'
        paginatedReadMembers: 'App\GraphQL\PaginatedReadMembersQueryCreator'