Design a system for real-time processing of user authentication requests.

Question

Anonymous · Accepted Answer

I would have a server program, an API gateway, and a database. The database and
server can be distributed or centralized. The API gateway handles the number of
requests passed to the server (preventing overload and DOS attacks) and checks
the validity of the requests and other possible security risks (like injection
attacks). After the requests pass API gateway and get to server, the server
creates a new thread to handle the new request. The thread sends a query to the
database to fetch the user information for this authentication request, and if a
user is found, the server sends a 200 response with a token header for future
usage. Otherwise the server sends a 404 response.

Anonymous · Answer

the complexity is with user & group with permission. If a user is assigned to a
group and the group has permission, we must calculate effective permission as
group assignment are changed. We would design a system that on group update, the
effective permission of the user is recalculated async and stored. When a
request to authorize an action come in, it because a constant time to validate
user/permission match.

Design a system for real-time processing of user authentication requests.

Practice this question with AI

Go Premium

Community Answers

Unlock Full Access

Unlock Full Access

Practice More Questions