Filtered list of access control headers
apply_filters( 'graphql_access_control_allow_headers', array $access_control_headers );
Next
graphql_allowed_fields_on_restricted_type