the company now needs to write a gateway in node, and I"m going to implement it in express. Now there are a few questions that I hope some bosses can answer.

1. The call to the permission of the interface

before, the authentication operation of the interface is completed in the client. Is it necessary to put the authentication operation on the gateway, but in this case, the gateway is required to make a new authentication for the client to use. Otherwise, any client can call API, which is not normal.

2. Log management

thinks that the log of API is very important. If the server already has a log, whether the gateway still needs log operation

3. Version control, due to the existence of gateways, when the backend updates API, it means that the gateway also needs to be updated. How to update Synchronize?

above, hope to have a boss to answer