هوية الخدمة إلى الخدمة

في هذا الدرس

identify calling services safely.

الموضوعات المخطط لها

• Client credentials: orders has its own client id and secret (stored in a secrets manager) and gets a token for inventory.
• Token exchange: swap the user's token for a narrower token for the next service, keeping the user as subject.
• Choose: acting as the service (background, system tasks) versus acting for the user (user-specific data).
• One all-powerful service account is a common mistake; give each service only the scopes it needs.
• mTLS can add transport identity; it complements, not replaces, token checks.