How would you handle Cross-Site Request Forgery (CSRF) in microservices?

Short answer: Cross-Site Request Forgery (CSRF) is an attack where an attacker tricks the user into making a request to a service they are authenticated to, potentially causing unintended actions.

Real-world example (ShopNest)

ShopNest splits Catalog, Cart, Order, and Payment into services so teams can deploy catalog changes without redeploying payments.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.