title: Why should API gateway and authentication service be different?
body: <p>What are the advantages and disadvantages of using an API gateway for authorization? If the API has JWT token with the existing API's Permissions in the header, I can just match that at the API gateway. Matching this at an authorization service will include overhead also.</p>