News for hackers. Stuff that matters.

A comment on Authorization in a Microservices World. Parent comment

Re:Authorization in a Microservices World by samjs on Friday April 01, 2022 @04:41PM (#30883086)
Nice!

Is the request composer responsible for checking the authorization data? Like what roles/permissions the user has?

[ Parent | on HN ]
Re:Authorization in a Microservices World by gedy on Friday April 01, 2022 @06:12PM (#30883850)
Not the OP but we did similar and this front end gateway/"backend for front end" would do the roles checks, yes. Back end services could do course grained checks if needed.
[ Parent | on HN ]