Authentication is one of the trickiest parts of microservices architecture — especially when you start adding API Gateway, service-to-service auth and managed identities into the mix.
I started a series breaking it down from the ground up in short videos:
Part 1 — Basic Auth vs Bearer Tokens vs JWT:
🔗 https://youtu.be/bP1mo3UbhNg?si=e91__vEuYEEfcXU7
Part 2 — OAuth 2.0 + PKCE:
🔗 https://youtu.be/gEIfV3ZSt-8?si=8Pm0EeUWMVy5iNJK
Next up: OpenID Connect & SSO, then planning to cover API Gateway auth, K8s & Azure Managed Identity — the stuff that actually comes up in enterprise microservices setups.
Curious how others handle auth across services — JWT with shared secret, Managed Identity, mTLS? Would love to discuss!