Adopt a Zero Trust Approach with OAuth 2.0 Mutual TLS Client Authentication
In the modern IT stack, API gateways act as the first line of defense against attacks on backend services by enforcing authentication/authorization policies and validating and transforming requests. When backend services are protected with a token-based approach, client applications must obtain an access token to access the protected resource.