@Cekir thanks for your feedback.
I am new to rasa deployment, so at the moment I only tested the bot locally with one particular user token. In the actions.py file at the beginning I have defined:
token = 'xxx'
# Select your transport with a defined url endpoint and headers
transport = AIOHTTPTransport(
url='https://api.xxx.com/graphql', headers={'Authorization': 'Bearer ' + token})
# Create a GraphQL client using the defined transport
client = Client(transport=transport, fetch_schema_from_transport=True)
So it works for this specific user but I was wondering how to generalize this to multi-users and what should I define in addition to what I have already done?