Hi Andreea, On Mon, Aug 10, 2020 at 3:06 PM Andreea Miruna Moise <san...@adobe.com.invalid> wrote: > ...The queries run in authenticated environment and if the CDN does not > support private caching > then I guess it has to be supported by sling right?...
I would just mark such responses with "Cache-Control:private" to allow clients to cache them privately according to other cache headers. Considering the they are responses to plain GET requests, browsers should treat them in the same as non-GraphQL web content. -Bertrand [1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control