Deshansh Garg on Instagram: "How to approach Auth in microservices (Interview style): 1️⃣ Authentication vs Authorization → who you are vs what you can do. 2️⃣ Centralized Identity Provider (OAuth2 / OIDC) → issue JWTs or tokens. 3️⃣ API Gateway → verifies tokens before hitting services. 4️⃣ Token-based AuthZ → roles/scopes inside JWT → RBAC/ABAC. 5️⃣ Service-to-Service Security → mTLS or service identity tokens. Rule of thumb: Centralized Auth + token verification across services, then enforce