• Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other all forums
this forum made possible by our volunteer staff, including ...
  • Campbell Ritchie
  • Liutauras Vilda
  • Bear Bibeault
  • Tim Cooke
  • Junilu Lacar
  • Paul Clapham
  • Devaka Cooray
  • Knute Snortum
Saloon Keepers:
  • Ron McLeod
  • Tim Moores
  • Stephan van Hulst
  • Tim Holloway
  • Frits Walraven
  • Carey Brown
  • salvin francis
  • Claude Moore

oauth 2.0 with java spring security and netflix zuul proxy  RSS feed

Posts: 1
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi all,

I'm trying to re-work my application which was designed more for user-driven behaviour to m2m friendly - I want let external web services to interact with my microservices.
Architecture is the following:
1. API gateway which uses netflix zuul proxy
2. Authorization service (oauth 2.0)
3. bunch of microservices which communicate through the gateway

I'm looking for an example of the gateway configuration that when an external client/service (ext) tries to access my backend services (api) the gateway (gw) would establish a secure session by redirecting request to the oauth service (oa), then after oa provides access token to ext, the gw would let with this token the ext through and access the api; the api should get the ext token (jwt) and validate it (scope), then if access to a resource can be granted would process the request.

I have almost all ingredients - oa with client credentials configuration enabled and database with client credentials (including scopes configuration), api (which checks requester jwt token for required scopes), but I don't know how to implement the gw configuration.

My question on stack overflow is here, very similar but more generic request (system architecture is exactly the same except for thing that I don't need/want user authorisation, only client) is here.

Looking forward to your suggestions!
This will take every ounce of my mental strength! All for a tiny ad:
Create Edit Print & Convert PDF Using Free API with Java
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!