API Key Management for a Distributed API

Preview:

DESCRIPTION

Building software in distributed components has a lot of benefits. It's easier to maintain and refactor, theres a clean separation of concerns, and it's easier to split into multiple teams to get work done. But how do you manage common tasks like Authentication sanely in such an architecture? We built an API Gateway in Nginx that starts to solve some of these issues.

Citation preview

1

CONFIDENTIAL

Andrew WinderSenior Software Engineer, Message Systems

Key Management for a Distributed API

April 10, 2023

2

Who Is Message Systems?

3

How do we develop products?

• API-centric architecture• Resource-oriented APIs, future plans for Hypermedia• Web UIs are JavaScript apps talking to APIs• Modular APIs and codebases

4

Challenges with that approach?

5

Challenges

6

Solution, from 10K feet

7

Pre-Built Solutions

8

Nginx for CORS

9

Nginx for Auth

10

Benefits of this approach

11

12

Demo & Questions

Twitter: @awinderandrew.winder@messagesystems.com

Recommended