mutation authenticate($username: String!, $password: String!) {
  auth {
    login(username: $username, password: $password) {
      ... on AuthError {
        message
      }
    }
  }
}