Difference between graphQL playground and running it within the storefront

[caseyjconger]

Hi all, I'm running into an issue dealing with refreshing user tokens. I have the platform running (via docker) on an EC2 instance.

I wrote the following GraphQL mutation

mutation ($csrfToken : String) {
  tokenRefresh(csrfToken: $csrfToken) {
    token
    user {
      id
      firstName
      lastName
    }
  }
}

When I run this in the GraphQL Playground it works perfectly fine. However, when I try adding it to the code (add a .graphql file and run pnpm generate to get the hooks and types), the query runs but returns null values for the token and user fields (I see it hitting the backend and returning a 200).

Likewise , if I try using postman and send the same request to http://my-ip-address:8000/graphql I again get the same response as trying to call it from within the storefront:

{
    "data": {
        "tokenRefresh": {
            "token": null,
            "user": null
        }
    },
    "extensions": {
        "cost": {
            "requestedQueryCost": 0,
            "maximumAvailable": 50000
        }
    }
}

Question: Any ideas why the difference in behavior between the graphql playground versus calling it from within the storefront/postman? Is this a permissions issue? Any insight would be appreciated and please let me know if you need any additional info.

Thanks!