Microservices - Authentication and Authorization
In a microservices system, Service A receives a JWT token from a user and calls Service B, which calls Service C. To ensure secure JWT token propagation and verification, which design is best?
In a microservices system, Service A receives a JWT token from a user and calls Service B, which calls Service C. To ensure secure JWT token propagation and verification, which design is best?
hard📝 Trade-off Q15 of 15
Step-by-Step Solution
Solution:
Step 1: Understand token propagation best practice
JWT tokens should be forwarded unchanged so each service can verify the original user identity and claims.Step 2: Evaluate alternatives
Generating new tokens breaks trust chain; skipping tokens breaks authentication; fetching tokens from another service adds complexity and risk.Final Answer:
Service A sends the JWT to Service B, which forwards the same JWT to Service C; each service verifies the token locally -> Option AQuick Check:
Forward original JWT for trust and verification [OK]
Quick Trick: Forward original JWT unchanged for trust across services [OK]
Common Mistakes:
MISTAKES- Creating new tokens at intermediate services
- Not forwarding tokens to all downstream services
- Relying on token fetching instead of forwarding
Master "Authentication and Authorization" in Microservices
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Microservices Quizzes