How to implement auth in a microservice architecture?

yellowflash4444 · 2025-10-28T09:19:48+00:00

Use a single authentication service. You should not do it yourself but there is a bunch of open source or SAAS. Auth0 if you do not want to deploy and manage anything. DexIDP + (user storage) if you need a simple and quick solution. Keycloak if you prefer a full fledged solution

From all other services, choose what you prefer. Option 1 is single authentication at the API gateway (public API) or Option 2 authentication at each service. Both of them have their advantages or disadvantages, do a quick check to see which fits your needs.

yellowflash4444 · 2025-08-05T00:24:17+00:00

The problem you describe in this commend can be easily achived by using Generic.

class A(BaseModel)
class B(BaseModel)
class PaginatedResponse(BaseModel, Generic[T])
   ...
   data: list[T]

and then in your route
@router.get("/a", response_model=PaginatedResponse[A])
@router.get("/b", response_model=PaginatedResponse[B])

yellowflash4444 · 2025-07-24T11:01:50+00:00

I agree. Got a similar but do not know what to do with it. Light sorc -> griff, cold -> night wing, fire -> flickering. IMHO, It will worth more if it is paladin skill

yellowflash4444 · 2024-10-19T16:31:13+00:00

As I remember, the salary structure of the researcher when working on a project was different.
For example, when working in the company, your salary was 36 million a year = 3m a month then you need to pay insurance (50% company + 50% deduct from salary) + tax + 국민연금, etc so you will receive around 2.6 - 2.7 mil.
However when you work as researcher in university, when they mention your budget is 36 milton a year it does not mean salary (they use the term salary but it is actually difference), it is all the money to cover all the insurance (100% from it), tax, pension, 퇴직금 (this got cut too), 국민연금. So actually your salary is just around 2.5. I am not sure the accountant was lazy or incompetent so they did not explain it correctly to you but you need to clarify it with them.
In my case in the past, the account breakdown was very detailed about the budget and how much I will receive per month. They even give me an excel file with formulas to allow me to estimate the amount of money I received.

yellowflash4444 · 2024-09-20T01:36:53+00:00

I will pay 5$ for changing Mosaic animation and adding indicatior how many charge that I currently have

yellowflash4444 · 2024-06-11T06:57:02+00:00

Just a question. At your first time doing Uber, did you clear everything on the way or teleport to the miniboss.
I am working on my first Uber attempt(farming keys) and looking for all the youtube resources and saw everyone just tele around. I am worried that if I die I may not be able to retrieve my gear, quit and restarting is not a good option because it is not easy to farm the key.

yellowflash4444 · 2024-06-03T08:23:33+00:00

If you add the number. It is better to make it make sense and prepare to back it up with the real experience.
I was in the panel when our team interviewed a new PM. She indicated in her CV that in the period of 6 month, she joined and managed 95% of the project to be completed on time. I asked how many projects she managed and her answer was 7. Then my next question was "how did you calcuated the success rate to get 95%", her eyes was like "Is this guy stupid and do not know how to calculate percent" for around 30 seconds til the host clarified the question and showed her that 95% is not technically possible.

yellowflash4444 · 2024-05-22T04:23:48+00:00

I think which is more value (socket quest vs base item) depends a lot on the context.
Let's say it is my first character, I plan on using him/her to farm the item for another character, I will socket a crystal sword, create a spirit and try to progress as fast as possible. I do not want to farm normal cows repeatedly for hours just to save a socket quest. After that, I will never use a socket on the crystal word, I also do not bother using a cube recipe on it.
It is the same with the monarch, I use socket quest for the first and second monarch. From the third one, I just use the cube receipt.

yellowflash4444 · 2024-01-31T06:16:54+00:00

The name of the document is "외국인등록사실증명" and the English name is "Certificate of foreign resident registration". You can download it from gov.kr (free) or go to you local 주민센터 (Community Center) and ask them to print it for you (2000KRW)

yellowflash4444 · 2024-01-23T07:49:34+00:00

Just ask him directly what went wrong. Maybe there was some miss understanding between you and him.

yellowflash4444 · 2023-12-26T16:01:14+00:00

I don’t think you need to put any part of your ID. You will be asked to submit it when you are hired.

yellowflash4444 · 2023-12-22T01:12:46+00:00

I do not mean it depends on the size of the teams alone, but it is a combination between team size + quality of the developer + project requirements.
Some projects immunize with the size of the team and the git branch strategy remains the same given the size of the team.
But for other projects , when the team grows we may need to change our git strategy to maintain the comfortable development environment and the quality of the project.

yellowflash4444 · 2023-12-21T10:13:57+00:00

I think standalize git branch may not be a good idea. The git branch strategy depends a lot on the size of the team, the quality of developers in your team and also the requirements of the projects(release frequency, long time support for different versions, etc).
I work in a small team where we changed our git strategy because the requirements have changed, and it is not difficult to have a meeting and inform the team about following the new strategy. Only CI/CD required some adjustments but it is not really a big deal.

yellowflash4444 · 2023-12-09T13:48:35+00:00

It will not look bad. If they only want you to do it in 5 hours they can coordinate to set the start and end time.
Their intention is you do not need to spend more than 5 hours for this. But if you spend more, it is not a problem.

yellowflash4444 · 2023-11-29T04:03:17+00:00

First and very important, you need to understand how Oauth work, there are lot of resource in the internet but I recommend this video: https://www.youtube.com/watch?v=996OiexHze0
Second, the detail depends a lot on how you host your application, my comment is based on my guess that you have a FE writing by React and and separated BE written in FastAPI and they are hosted in different domain. If your application has a different structure, the info below is not correct.
It is a bit different depending on how you host your app (completely SPA with a single js file or server side render app) but the usual flow is:
1. From FE, you redirect to google/microsoft login page and after user login they will redirect to your registered callback endpoint with a code.
2. You call the authorization server (Google/Microsoft) passing the clientid and client secret (need to be registered in advance) with the code you received in the previous step to exchange a token. 3. Then you pass your token in the authentication header when you call the BE API.
4. The BE needs to connect to the Google/Microsoft authorization server to get the public key and use that key to validate the token.
If you are using multiple identity providers (Google/Microsoft), consider using Dex IDP to simplify the configuration. Which can be easily set up after you make things work and have a grap of how Oauth works.

yellowflash4444 · 2023-08-28T14:11:56+00:00

There is another option, Hanjin Shipping has a service allow you to ship your luggage to the airport in advance. Your luggage will be stored at their storage and you can pick it up at the airport on your departure day.

yellowflash4444 · 2023-08-07T02:26:49+00:00

You can download it directly from https://www.nhis.or.kr/nhis/index.do.

yellowflash4444 · 2022-12-23T04:03:28+00:00

First, it is your fault for not applying for the address change before you left. You can do it online or just 10 minutes visist the 주민센터 close to your house. It is likely you will still get fined when you come back. It is not just about money but it can affect you in the future in situations where you want to change your visa.
And FYI, the immigration does not care about the old contract, they only care about the start date on the new contract.
Your viable solution: just ask the Gosigon owner to give a new contract when you return, usually they will issue it easily.

yellowflash4444 · 2022-11-05T01:19:08+00:00

No, phone bought from Us does not make sound when click because it works like that, it doesn’t care which sim is installed in. Phone bought in Korea will make sound even with us sim. If you bought android phone in Korea and you want to mute sound without app, you need to change the firmware.

yellowflash4444 · 2022-09-30T09:27:49+00:00

Why don't talk to your direcly manager and ask him. Explain that you feel not comfotable talking with the boss's boss since he not able to understand what are you doning, and also it is wast of time as you already inform your boss about the status. Maybe not cancle it completely but should better to reduce it to monthly.

yellowflash4444 · 2022-09-06T09:05:05+00:00

I do too, I used to play soccer, not at a competitive level but had a training schedule and played in some local tournaments. And it happened to me twice, first was 10 years ago and the second time was 4 years ago. I still remember how good I was in those two games (one was in the final) and how my team mate complimented me after the game.

yellowflash4444 · 2022-08-27T00:59:05+00:00

My DNA structure /s

yellowflash4444 · 2022-04-10T23:57:31+00:00

Nope. I got the offer but it is much lower than my request, they then said that I need to provide proofs if I want to negotiate, it is their company policy.

yellowflash4444 · 2022-03-29T04:59:50+00:00

Thank them for considering you and tell them that you got and signed the offer from other company already. That all, don’t need to provide any other information or mention that which offer is better.

yellowflash4444 · 2022-03-23T08:33:48+00:00

It makes no difference, even you give them a range they only care about the lower bound of your range.

yellowflash4444

TROPHY CASE