AuthN + AuthZ solution for customer-facing site + app

[rlmartin]

Notes:

• What support does Kubernetes and/or Istio provide?
• Authentication is "easy", given JWT or other tokens.
• Authorization more difficult
  • Could be only at the edge via GQL or BFF.
  • Could be at the microservice level
  • Role based
  • or more granular

[rlmartin]

Kubernetes documentation: https://kubernetes.io/docs/reference/access-authn-authz/authorization/