Quick Answer
Authentication in microservices: validate JWTs at the API Gateway (verify signature, expiry, issuer). The gateway passes user identity downstream in request headers. Internal services trust the gateway - they don't re-validate the JWT signature. Use OAuth2/OIDC for token issuance. Service-to-service auth uses mTLS or service account tokens (not user tokens).
Answer
Authentication is handled using a centralized identity provider (IdP) like OAuth2, OpenID Connect, or Keycloak. Services validate JWT tokens issued by the IdP. Enables SSO and reduces password management overhead inside individual services.
S
SugharaIQ Editorial Team
Verified Answer
This answer has been peer-reviewed by industry experts holding senior engineering roles to ensure technical accuracy and relevance for modern interview standards.
