Putting it All Together - Dgraph Authentication, Authorization, and Granular Access Control (PART 2) - Dgraph Blog

Should I throw a graphql error in resover? how to throw it in node js?
where is the action of verified should take placed? the resover too?

There is so little information about this, any detail will be appreciated.