Max Stoiber is the CTO at Spectrum, a real-time chat platform for online communities. In this guest post he describes how they secured their GraphQL API from attackers. — With GraphQL you can query exactly what you want whenever you want. That is amazing for working with an API, but also has complex security implications. Instead of asking for legitimate, useful data, a malicious actor could submit an expensive, nested query to overload your server, database, network, or all…