Design a Login and Session Service · System Design Interview

Design a Login and Session ServiceDesign the service that signs people into a product and keeps them signed in, and that every other service asks who is calling it.What it has to do

Any service can tell who is making a request, and reject one with no valid session

Signing out, or changing a password, ends the sessions it should

Scale

Registered accounts: 600 million

Sign-ins per day: 80 million

Requests needing a session checked per second: 4 million

Out of scope

Sign-up and account recovery

Federated and social login

What a user is allowed to do once identified

Bot and fraud detection

Practise this challengeAll system design challenges

LetsDiscuss

Loading your session…