User Story:
For the current being, we will use Gateway to do the authentication. The user information will be stored in Gateway. For the services behind the gateway, we do not authenticate. Just call those services directly.
Later we will create a single-sign-on Service. This single-sign-on service will be used for authentication. Every other service will talk to the authentication service to validate the token. If we use Github, then gateway will have to make a request to CommunityService in order to persist the user information.
Acceptance Criteria
Use Gatway as the place for authentication.
User Story: For the current being, we will use Gateway to do the authentication. The user information will be stored in Gateway. For the services behind the gateway, we do not authenticate. Just call those services directly.
Later we will create a single-sign-on Service. This single-sign-on service will be used for authentication. Every other service will talk to the authentication service to validate the token. If we use Github, then gateway will have to make a request to CommunityService in order to persist the user information.
Acceptance Criteria Use Gatway as the place for authentication.