Gausa khawatir soal itung-itungan di TIU nder👌🏻
✨Aku punya cheat sheet TIU CPNS 2024 yang bisa bantu kamu kuasai soal hitungan dengan lebih mudah dan cepat.
🔗Download: https://t.co/7LFnIjwuhi
🚀 Welcome to ForU AI! where AI, Blockchain, and DiD give you the power! Secure your data, earn as you go, and enjoy a smarter digital experience across the web. Don’t miss out—join the revolution now! 🔥
What does API gateway do?
The diagram below shows the detail.
Step 1 - The client sends an HTTP request to the API gateway.
Step 2 - The API gateway parses and validates the attributes in the HTTP request.
Step 3 - The API gateway performs allow-list/deny-list checks.
Step 4 - The API gateway talks to an identity provider for authentication and authorization.
Step 5 - The rate limiting rules are applied to the request. If it is over the limit, the request is rejected.
Steps 6 and 7 - Now that the request has passed basic checks, the API gateway finds the relevant service to route to by path matching.
Step 8 - The API gateway transforms the request into the appropriate protocol and sends it to backend microservices.
Steps 9-12: The API gateway can handle errors properly, and deals with faults if the error takes a longer time to recover (circuit break). It can also leverage ELK (Elastic-Logstash-Kibana) stack for logging and monitoring. We sometimes cache data in the API gateway.
Over to you: 1) What’s the difference between a load balancer and an API gateway?
2) Do we need to use different API gateways for PC, mobile and browser separately?
–
Subscribe to our weekly newsletter to get a Free System Design PDF (158 pages): https://t.co/FIzCeaWsZV
Explaining JSON Web Token (JWT) to a 10 year old Kid.
Imagine you have a special box called a JWT. Inside this box, there are three parts: a header, a payload, and a signature.
The header is like the label on the outside of the box. It tells us what type of box it is and how it's secured. It's usually written in a format called JSON, which is just a way to organize information using curly braces { } and colons : .
The payload is like the actual message or information you want to send. It could be your name, age, or any other data you want to share. It's also written in JSON format, so it's easy to understand and work with.
Now, the signature is what makes the JWT secure. It's like a special seal that only the sender knows how to create. The signature is created using a secret code, kind of like a password. This signature ensures that nobody can tamper with the contents of the JWT without the sender knowing about it.
When you want to send the JWT to a server, you put the header, payload, and signature inside the box. Then you send it over to the server. The server can easily read the header and payload to understand who you are and what you want to do.
Over to you: When should we use JWT for authentication? What are some other authentication methods?
–
Subscribe to our weekly newsletter to get a Free System Design PDF (158 pages): https://t.co/4QcX8btXGL
JWT Explained to a 5 Year Old
📦 Imagine you have a 🔒 magic box that can store secret messages. The only way to open this box and read the message inside is with a 🔑 special key.
Now, let's say you want to send a message to your friend, but you don't want anyone else to read it. You put your message in the 📦 magic box and lock it with your 🔑 special key. Then you give the locked box to your friend.
When your friend receives the box, they can use the 🔑 special key to unlock it and read the message. They know that only you have the special key, so they can be sure that the message came from you and hasn't been tampered with.
In a similar way, when we want to send information securely over the internet, we can use something called JSON Web Tokens (JWT). A JWT is like a digital version of the 📦 magic box and the 🔑 special key.
We can put information, like a username or some other data, into the JWT and lock it with a secret 🔑 key. Then we can send this locked JWT over the internet to another person or computer. When they receive the JWT, they can use the secret 🔑 key to unlock it and access the information inside.
The great thing about JWTs is that they are safe and secure. Just like only you can unlock the magic box with your special 🔑 key, only the person with the secret 🔑 key can unlock the JWT and read the information. This helps keep our data safe when we send it over the internet! 🌐🔒😄
🚨 Join Waiting List for New 10+ Hour Linux Course - https://t.co/EolNQecppN
Image Creds to Manish Poduval
#jwt #authentication #security #webdevelopment #softwareengineering #websecurity