...
When putting a microservice behind an API proxyProxy, which will handle authentication, one needs to decide whether to authenticate the request again once it reaches the microservice. As illustrated in the diagram the answer is “yes” in order to fulfil the recommendations for microservices security listed here and here.
...