Express Middleware sits at the heart of express integration in GraphQL. This guide walks through the concept step by step, with examples, a cheatsheet, and common mistakes to avoid.
Express Middleware Overview
Express Middleware is a building block you will reach for often in GraphQL. It keeps related logic together and makes your intent obvious to reviewers and future maintainers.
When you learn express middleware properly, you avoid the guesswork that leads to bugs and rework. The example below shows the shape you will use in most real GraphQL projects.
import { ApolloServer } from '@apollo/server';
import { startStandaloneServer } from '@apollo/server/standalone';
const server = new ApolloServer({ typeDefs, resolvers });
const { url } = await startStandaloneServer(server, { listen: { port: 4000 } });
A GraphQL API is a schema plus resolvers served by Apollo Server or GraphQL Yoga.
Start from a minimal Express Middleware example and grow it only as needed.
Keep configuration explicit so Express Middleware behaves the same in every environment.
Name things clearly so teammates understand your Express Middleware at a glance.
Add tests around Express Middleware early to lock in expected behaviour.
GraphQL Cheatsheet
Quick GraphQL reference related to express middleware.
Concept
Example
Purpose
Schema
type Query { user(id: ID!): User }
Define the API shape
Resolver
Query: { user: (_, { id }) => ... }
Provide field data
Query
query { user(id: 1) { name } }
Read exactly what you need
Mutation
mutation { createUser(input) { id } }
Change data
Subscription
subscription { postAdded { id } }
Real-time updates
Context
context: ({ req }) => ({ user })
Auth and shared state
DataLoader
loader.load(id)
Batch to avoid N+1
How Express Middleware Works in GraphQL
Express Middleware fits into GraphQL's model of a single typed schema that clients query for exactly the data they need. The server resolves each requested field through resolver functions.
A GraphQL API is a schema plus resolvers served by Apollo Server or GraphQL Yoga.
The schema is the contract between client and server.
Resolvers fetch data field by field, including nested types.
Clients request only the fields they use, avoiding over-fetching.
Context carries auth and shared services into every resolver.
Practical Guidance for Express Middleware
In production, express middleware should be efficient and secure. Batch data access with DataLoader, guard resolvers with authorization, and limit query depth and complexity.
Concern
Recommendation
N+1 queries
Batch with DataLoader
Security
Auth in context, depth/complexity limits
Errors
Typed GraphQLError with extension codes
Performance
Cache and paginate large lists
Common Mistakes
Skipping error handling and edge cases when wiring up express middleware.
Leaving express middleware untested, so regressions slip into production.
Over-engineering express middleware before you actually need the extra flexibility.
Ignoring documentation, which makes express middleware hard for the next developer to change.
Key Takeaways
Express Middleware is a core part of working effectively with GraphQL.
Start small and keep express middleware focused on a single responsibility.
Apply consistent patterns so express middleware scales across your project.
Test and document express middleware to keep it maintainable over time.
Pro Tip
Pair express middleware with automated tests from day one. It is far cheaper to catch GraphQL regressions in CI than in production.
You now understand express middleware in GraphQL and how to apply it in real projects. Next, continue with Express Routing to keep building your skills.