Node.js · Authentication · Tech Lead · Architecture
Lead: multi-service auth for a Node platform?
Short Interview Answer
Central IdP/OIDC, gateway validation or sidecar JWKS cache, service-to-service mTLS or signed tokens, and consistent claim schemas.
Detailed Explanation
Avoid each service inventing auth. Propagate correlation IDs. Plan revocation and key rotation. Document threat model.