All geek questions in one place

Spring Security Protection Filter on Zuul for Creating and Sharing a Session

I am on the development team working on a large-scale project that uses Spring-based microservices. We recently discovered the Spring Cloud project and are experimenting with the implementation of the services Netflix, Zuul, Eureka, Ribbon, etc.

In our environment, no one will have access to the domain in which our application will work until it is previously authorized through an external service. As soon as they get into our application, we can get the user ID through the header marker provided by the authorization service.

I would like to configure Zuul using Spring Security using a pre-authentication filter to establish a user session and use the Spring session to make the session available to all external microservices.

Is this a legitimate approach? The only information I can see about security on Zuul is the OAuth2 proxy token feature for internal services, but we don't need OAuth2. Is there a better way to establish a user session and share it through services in our internal architecture?

+4
source share
2 answers

Pay attention to the following tutorial

GitHub

, Ldap. Java .

+4

, OAuth , Zuul OAuth. auth, Spring Cloud . , RibbonRoutingFilter . , , RibbonRoutingFilter , application.yml: zuul.RibbonRoutingFilter.route.disable: true

, auth, RibbonRoutingFilter. auth , RibbonRoutingFilter. auth , . GitHub: AuthAwareRoutingFilter.java

0

Source: https://habr.com/ru/post/1608222/

More articles:


All Articles