This week's book giveaway is in the Python forum.
We're giving away four copies of Python Continuous Integration and Delivery and have Moritz Lenz on-line!
See this thread for details.
Win a copy of Python Continuous Integration and Delivery this week in the Python forum!
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other all forums
this forum made possible by our volunteer staff, including ...
  • Campbell Ritchie
  • Liutauras Vilda
  • Bear Bibeault
  • Paul Clapham
  • Jeanne Boyarsky
  • Devaka Cooray
  • Junilu Lacar
  • Tim Cooke
Saloon Keepers:
  • Tim Moores
  • Ron McLeod
  • Tim Holloway
  • Claude Moore
  • Stephan van Hulst
  • Winston Gutkowski
  • Carey Brown
  • Frits Walraven

oauth 2.0 with java spring security and netflix zuul proxy  RSS feed

Posts: 1
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi all,

I'm trying to re-work my application which was designed more for user-driven behaviour to m2m friendly - I want let external web services to interact with my microservices.
Architecture is the following:
1. API gateway which uses netflix zuul proxy
2. Authorization service (oauth 2.0)
3. bunch of microservices which communicate through the gateway

I'm looking for an example of the gateway configuration that when an external client/service (ext) tries to access my backend services (api) the gateway (gw) would establish a secure session by redirecting request to the oauth service (oa), then after oa provides access token to ext, the gw would let with this token the ext through and access the api; the api should get the ext token (jwt) and validate it (scope), then if access to a resource can be granted would process the request.

I have almost all ingredients - oa with client credentials configuration enabled and database with client credentials (including scopes configuration), api (which checks requester jwt token for required scopes), but I don't know how to implement the gw configuration.

My question on stack overflow is here, very similar but more generic request (system architecture is exactly the same except for thing that I don't need/want user authorisation, only client) is here.

Looking forward to your suggestions!
It is sorta covered in the JavaRanch Style Guide.
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!