04 / Service integration
Define each service's responsibilities
Before integrating, list application domains, API paths, upstream services, permissions, and access policies. The gateway manages ingress; each business service remains responsible for its domain rules and data access checks.
| System | Responsibilities | Access |
|---|---|---|
| Authentication Center | Application authentication, login methods, login pages, and session policies. | Open |
| Access Management | Organizations, account profiles, tenants, roles, and business resource permissions. | Open |
| Gateway Center | Upstream and route registration, access policies, and configuration releases. | Open |
| Business services | Domain rules, data access, and server-side permission checks. | Provided by the application |
Suggested integration order
- Confirm the contracts for identity, business sessions, tenant context, and resource permissions.
- Register upstream services and routes in Gateway Center, and configure the policies required by your application.
- Test authorized and unauthorized requests, timeouts, error feedback, and configuration releases.
- Integrate foundational services such as file storage with application-specific authorization, and verify controlled access to private resources.
Administrators provide specific APIs and credentials for each application and environment. Do not expose internal admin URLs, service secrets, or admin interfaces in public frontend configuration.