0
Jump into concepts and practice - no test required
Recommended
This diagram shows the client sending requests to the API Gateway, which performs authentication checks before forwarding requests to microservices.
### Before: Authentication inside each microservice (naive) from flask import Flask, request, jsonify app = Flask(__name__) @app.route('/data') def data(): token = request.headers.get('Authorization') if not token or token != 'valid-token': return jsonify({'error': 'Unauthorized'}), 401 return jsonify({'data': 'secret data'}) ### After: Authentication at API Gateway (centralized) # Gateway code from flask import Flask, request, jsonify app = Flask(__name__) @app.before_request def authenticate(): token = request.headers.get('Authorization') if not token or token != 'valid-token': return jsonify({'error': 'Unauthorized'}), 401 @app.route('/proxy/<path:path>') def proxy(path): # Forward request to microservice without auth check # (simplified example) return jsonify({'data': 'secret data from microservice'}) # Microservice code (no auth needed) from flask import Flask, jsonify microservice = Flask(__name__) @microservice.route('/data') def data(): return jsonify({'data': 'secret data'})
authentication at the gateway level in a microservices architecture?function handleRequest(request) {
const token = request.headers['Authorization'];
if (!validateToken(token)) {
return { status: 401, message: 'Unauthorized' };
}
return forwardRequest(request);
}
What will happen if validateToken always returns false?validateToken(token) returns false, the code returns 401 Unauthorized immediately.