I created a new gem called graphql-guard which provides a field-level authorization for GraphQL. Previously, the only authorization solution for Ruby was GraphQL Pro which is a paid and not open-sourced version of GraphQL. graphql-guard can work with any other authorization libraries such as CanCanCan or Pundit. I recently published a stable v1.0.0, my company uses it on production ;)