Microservices - Authentication and Authorization
For a microservices platform with thousands of services, which service-to-service authentication strategy best balances security and scalability?
For a microservices platform with thousands of services, which service-to-service authentication strategy best balances security and scalability?
hard📝 Trade-off Q8 of 15
Step-by-Step Solution
Solution:
Step 1: Evaluate scalability
Centralized OAuth 2.0 with JWT tokens scales well due to stateless tokens.Step 2: Evaluate security
Short-lived JWT tokens reduce risk; OAuth 2.0 is industry standard.Step 3: Compare alternatives
mTLS is secure but complex at scale; API keys are less secure; skipping verification is unsafe.Final Answer:
Use a centralized OAuth 2.0 authorization server issuing short-lived JWT tokens -> Option AQuick Check:
Stateless tokens improve scalability and security [OK]
Quick Trick: Centralized OAuth with JWT tokens balances scale and security [OK]
Common Mistakes:
MISTAKES- Choosing mTLS without considering operational complexity
- Using static API keys risking compromise
- Skipping token verification to improve performance
Master "Authentication and Authorization" in Microservices
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Microservices Quizzes