Use with devise_token_auth and change_headers_on_each_request config about graphiql-rails HOT 6 OPEN

# app/decorators/controllers/graphiql/rails/editors_controller_decorator.rb
module GraphiQLRailsEditorsControllerDecorator

  def self.prepended(base)
    base.prepend_before_action :authenticate, if: -> { !Rails.env.development? }
    base.prepend_before_action :set_auth_headers, only: :show
  end

  protected

  def authenticate
    http_basic_authenticate_with name: ENV["HBA_LOGIN"], password: ENV["HBA_PASSWORD"]
  end

  def set_auth_headers
    user = User.find_by_email(params[:email])

    if user.present?
       user_auth_token = user.create_new_auth_token

       GraphiQL::Rails.config.headers['access-token'] = -> (context) { user_auth_token['access-token'] }
       GraphiQL::Rails.config.headers['token-type'] = -> (context) { user_auth_token['token-type'] }
       GraphiQL::Rails.config.headers['client'] = -> (context) { user_auth_token['client'] }
       GraphiQL::Rails.config.headers['expiry'] = -> (context) { user_auth_token['expiry'] }
       GraphiQL::Rails.config.headers['uid'] = -> (context) { user_auth_token['uid'] }
    end
  end
end

GraphiQL::Rails::EditorsController.send :prepend, GraphiQLRailsEditorsControllerDecorator