DEV Community

Discussion on: "This Probably Won't Solve Your Problem" — A Tough Pill to Swallow

Collapse
 
srleyva profile image
Stephen Leyva (He/Him)

I think a lot of people solve the authentication/authorization problem utilizing an API gateway or auth micro service for one source of truth and SSO for multiple services. This is especially easier with JWT as you can validate the web token with a shared secret. Thought then rotation becomes a pain and needs an orchestrated mechanism. API Gateways are also good in terms of metrics on your HTTP gold metrics: request durations, error rates and request rate.