Hacker News new | past | comments | ask | show | jobs | submit login

I think no one argues that decoupling isn't the way, in fact that's exactly what others are saying too, but in the proper way. Make an authentication (micro)service and call it from your webapp. Proxy should proxy, auth service should manage (and cache, keep up to date) credentials, role associations and group memberships, web app should serve web pages (based on the business logic coded into it).



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: