with-graphql-rate-limit.js

import { createRateLimitDirective } from 'graphql-rate-limit';

const server = new ApolloServer({
  typeDefs: gql`
    type Mutation {
      # Limit to 10 per minute
      login(email: String!, password: String!): String! @rateLimit(max: 10, window: 60000)
    }
  `,
  resolvers: {
    Mutation: {
      login: () => { /* ... */ }
    }
  },
  schemaDirectives: {
    rateLimit: createRateLimitDirective({
      identifyContext: ctx => ctx.req.ip
    })
  }
});