Uploaded September 2023 | Updated September 2026, 2 hours ago
In this talk, we explored Rokt's new approach to simplifying their authentication system. We discussed the key themes of using a service mesh and edge gateway with Istio and Envoy, terminating existing authentication methods at the edge to issue a standardized identity token, and finally validating those tokens with a lightweight public key distribution system using JSON Web Key Sets (JWKS) on AWS. This combined strategy not only improved Rokt's security posture but also streamlines the developer experience.
In this talk, we explored Rokt's new approach to simplifying their authentication system. We discussed the key themes of using a service mesh and edge gateway with Istio and Envoy, terminating existing authentication methods at the edge to issue a standardized identity token, and finally validating those tokens with a lightweight public key distribution system using JSON Web Key Sets (JWKS) on AWS. This combined strategy not only improved Rokt's security posture but also streamlines the developer experience.
