Identity in distributed applications is hard. In large and complex environments with multiple services, a number of patterns have emerged to authenticate and authorize traffic. In this article, we’ll discuss the most common ones, how to implement them, and their pros and cons.