CSRF prevention plugin for GraphQL Yoga that requires the clients to have a specific header set.
github.com/dotansimha/graphql-yoga
dotansimha/graphql-yoga