التفويض بين الخدمات

في هذا الدرس

choose mechanisms for service identity and authorization.

الموضوعات المخطط لها

• Workload identity: each service gets its own identity issued by the platform (for example SPIFFE-style identities); verify which standard and tooling you use before recording.
• mTLS authenticates both ends and encrypts traffic; a service mesh can automate certificate rotation.
• Scoped tokens carry what a caller may do (audience, scopes), kept short-lived.
• Authorization decides at the callee: allow-lists of caller identities per endpoint, with business rules in a policy layer.
• Avoid shared credentials between teams; one service, one identity.