Menu

📰
0

API Authentication in microservices — starting from basics (Basic Auth, JWT, OAuth 2.0 + PKCE)

Reddit r/microservices·u/PreferenceNo9502·about 1 month ago
#4ji3U4Gw
Reading 0:00
15s threshold

Authentication is one of the trickiest parts of microservices architecture — especially when you start adding API Gateway, service-to-service auth and managed identities into the mix. I started a series breaking it down from the ground up in short videos: Part 1 — Basic Auth vs Bearer Tokens vs JWT: 🔗 https://youtu.be/bP1mo3UbhNg?si=e91__vEuYEEfcXU7 Part 2 — OAuth 2.0 + PKCE: 🔗 https://youtu.be/gEIfV3ZSt-8?si=8Pm0EeUWMVy5iNJK Next up: OpenID Connect & SSO, then planning to cover API Gateway auth, K8s & Azure Managed Identity — the stuff that actually comes up in enterprise microservices setups. Curious how others handle auth across services — JWT with shared secret, Managed Identity, mTLS? Would love to discuss!

Read More