[Mutations] My Account: Change Password about graphql-ce

[rogyar]

Hi guys. As far as I know, we use bearer token for the authentication, like the original API does. The task description says that we need to use cookies. Is the authentication principle has been changed recently? Could you clarify this point, please? Thank you

[misha-kotov]

@rogyar sorry for the confusion. Auth principles did not change, but GraphQL currently can use two methods for auth: Bearer token and session authentication (given you're on the same browser/agent). @paliarush please confirm I'm not talking crazy talk.
For this story, it should work with both, but honestly it's probably more important that it works with the token approach. I will update the description to reflect this.

[paliarush]

@misha-kotov You are correct, we have both, token-based and cookie-based authentication enabled for customers in GraphQL.