Authentication at gateway level in Microservices - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to check if the incoming request has an Authorization header.

Microservices

if not request.headers.get([1]):
    return 'Unauthorized', 401

Drag options to blanks, or click blank then click option'

AUser-Agent

BAuthorization

CContent-Type

DAccept

Attempts:

3 left

💡 Hint

Common Mistakes

Checking wrong headers like Content-Type or User-Agent.

The gateway must check the 'Authorization' header to authenticate requests.

2fill in blank

medium

Complete the code to extract the token from the Authorization header.

Microservices

token = request.headers.get('Authorization').[1](' ')[1]

Drag options to blanks, or click blank then click option'

Asplit

Breplace

Cstrip

Djoin

Attempts:

3 left

💡 Hint

Common Mistakes

Using replace or strip which do not split the string.

The token is usually after the word 'Bearer' separated by a space, so splitting by space and taking the second part extracts the token.

3fill in blank

hard

Fix the error in the code to validate the token using the gateway's auth service.

Microservices

is_valid = auth_service.[1](token)

Drag options to blanks, or click blank then click option'

Avalidate_token

Bverify

Ccheck_token

Dauthenticate

Attempts:

3 left

💡 Hint

Common Mistakes

Using generic method names that do not exist in the auth service.

The method to check token validity is typically named 'validate_token' in auth services.

4fill in blank

hard

Fill both blanks to reject requests without valid tokens and allow valid ones.

Microservices

if not [1]:
    return [2], 401

Drag options to blanks, or click blank then click option'

Ais_valid

B'Unauthorized'

C'Forbidden'

Dtoken

Attempts:

3 left

💡 Hint

Common Mistakes

Returning 'Forbidden' which is for authorization failure, not authentication.

If the token is not valid (is_valid is False), the gateway returns 'Unauthorized' with status 401.

5fill in blank

hard

Fill all three blanks to forward the authenticated request with user info to microservices.

Microservices

request.headers['X-User-ID'] = [1]
request.headers['X-User-Role'] = [2]
response = microservice_client.[3](request)

Drag options to blanks, or click blank then click option'

Auser_id

Buser_role

Csend_request

Dtoken

Attempts:

3 left

💡 Hint

Common Mistakes

Using the token directly instead of user info headers.

Using wrong method to forward request.

The gateway adds user ID and role headers extracted from the token, then forwards the request using 'send_request' method.