Gateway

The single edge every client talks to. Nothing else is meant to be reachable from a browser.

Status

What this service does

• Routes each request to the service that owns it, under /gateway/<service>/...
• Checks the permission that route requires before forwarding anything
• Resolves the caller's tenant and passes it on, so a service never trusts a client for it
• Caches authorization decisions in Redis, shared with the Users service that produced them