I have a working WebGraphQLInterceptor that does some authorization checks based on a combination of authentication and GraphQL query parameters.