NestJS · Authentication · Tech Lead · Architecture
Lead: integrate Nest services with corporate OIDC/SSO.
Short Interview Answer
OIDC authorization code at BFF/gateway, validate JWTs with JWKS cache, map claims to internal principals.
Detailed Explanation
Centralize claim-to-role mapping. Plan key rotation. Audit login events.