Bird
0
0

In a microservice architecture, how can you securely propagate user identity and permissions across multiple services?

hard📝 Trade-off Q9 of 15
Microservices - Authentication and Authorization
In a microservice architecture, how can you securely propagate user identity and permissions across multiple services?
ABy disabling authentication between services
BBy sharing a global user session stored only in the gateway
CBy using plain text headers without encryption
DBy passing JWT tokens with each request and validating them in every service
Step-by-Step Solution
Solution:
  1. Step 1: Understand identity propagation

    User identity and permissions must be securely passed to each service to enforce access control.
  2. Step 2: Use JWT tokens for secure propagation

    JWT tokens carry signed user info and permissions, which each service validates to maintain security across calls.
  3. Final Answer:

    By passing JWT tokens with each request and validating them in every service -> Option D
  4. Quick Check:

    JWT tokens propagate identity securely = D [OK]
Quick Trick: Use JWT tokens to carry identity across services [OK]
Common Mistakes:
MISTAKES
  • Relying on gateway-only session storage
  • Sending sensitive info in plain text
  • Disabling authentication between services

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More Microservices Quizzes