Shopify Payment app graphQL endpoint authentication

I am trying to create an offsite shopify payment app. Overall the authentication on GraphQL requests seems kinda confusing to me. Should there be any authentication token for graphQL request like PaymentSessionResolve.

This question might not be appropriate for stackoverflow but I am kinda stuck.