Passing auth information to a GraphQL server

[nareshbhatia]

I am using Auth.js + Next.js + Drizzle + Neon Postgres in my application. Now I want to introduce Apollo GraphQL Server for application data. Here's what the architecture looks like after this addition:

Two questions:

1. How do I pass the user information from the Next.js server to the GraphQL server securely? In other words, how can the GraphQL server trust that the user is indeed authenticated by the Next.js server?
2. The GraphQL server needs user data + application data. The diagram above shows both these stored in the single database instance. Is this a reasonable choice for a medium sized application? If yes, should I use a single user + application schema or manage them separately?

[nareshbhatia]

Any thoughts on integrating a GraphQL server into NextAuth? Please help.