How Snyk is normalizing authentication strategies with Gloo Edge

Snyk, a company that supports multiple authentication strategies on its APIs, has implemented Gloo Edge, an API Gateway developed by Solo.io, to normalize authentication and improve security. The central monolith was replaced with a service-oriented architecture (SOA) where each service would need to handle multiple authentication strategies, but this became cumbersome and hard to scale. To address this, Snyk introduced a single authority that normalizes authentication into a cryptographically assured identity token, which is then consumed by services without handling the complexity of supporting multiple authentication strategies. Gloo Edge was chosen as the new layer in their system to authenticate requests and produce the normalized token. The API Gateway supports request validation, rate limiting, and authentication, among other features, and allows Snyk to offload lines of code and simplify their authentication process. By moving JWT validation to the edge, Snyk can unify authentication strategies and enable Gloo to make authentication decisions based on key material provided by users. The company is now focusing on future work, including a canary release of all API traffic through Gloo Edge and extending its capabilities to include request validation at the edge.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.