Security Architecture: Defense in Depth
Security Architecture: Defense in Depth
HardHLD0% accepted
Design security architecture for a fintech platform. Cover authentication (OAuth2/JWT), authorization (RBAC/ABAC), encryption at rest and in transit, secret management, and compliance (PCI-DSS, SOC2).
Approach
Design fintech security architecture with auth, encryption, secret management, and compliance.
Input
User logs in, gets JWT, calls payment API
Output
Login -> Auth server issues JWT (sub, exp, scope); API gateway validates JWT signature; checks scope includes payments:write
More HLD problems
Browse all coding problems →Scenarios & Expected Answers
Sign in to continue
Create a free account to view answers and mark progress.
- Free forever — no credit card
- Theory Q&A with detailed answers
- Points, streaks & leaderboards