---
title: "Kaustav Sarkar (@kaustavsarkar) | Hashnode"
description: "SDE Cloudera. Read the latest articles by Kaustav Sarkar on Hashnode."
url: "https://hashnode.com/@kaustavsarkar"
---

@kaustavsarkar

# Kaustav Sarkar

@kaustavsarkar · Bengaluru · Joined May 2026

SDE Cloudera

[Website](https://kaustavsarkar.dev/)

## Comments

[This was a core requirement when I designed it. The inspiration came from migrating older services that had auth baked in, which made them tightly coupled to the existing infra. With this approach, a service can be upgraded or replaced without other components changing and without the auth flow changing. The one downside is the per-service header projection: each service needs its own EnvoyFilter to strip inbound identity headers and a RequestAuthentication to project the verified claim into a service-specific header (x-ms2-user, x-ms3-user, and so on). Its a tradeoff easier migration, security and isolation for a costlier bill :)](https://hashnode.com/posts/identity-flow-gateway-to-database/6a4bc269feaaeb7f1f5820cf/comment/6a4cedce51f06fa038d60001#reply-6a4e294bb33a17c6421c6b2d)

Reply · Article · Jul 8 · 1 · [The Identity Flow: From Gateway to Database](https://hashnode.com/posts/identity-flow-gateway-to-database/6a4bc269feaaeb7f1f5820cf)