forward Authorization token to routed microservices with zuul

TensaDev 0
Viewed 17

I've been using Zuul to make an API Gateway which holds most of the SecurityConfig, and made a Jwt based Authenticaiton, however I don't know why, whenever I request one of the routes to my microservice, the Request Header, doesn't contain the Authorization even if I did zuul.myMicroservice.sensitiveHeaders=Cookie

netflix-zuul microservices jwt spring-security spring-boot
1 Answers

The solution was to simply make a "pre" ZuulFilter and add a Header which contains the Authorization token

Though, you won't see that header show up in Postman, it is still there and you can intercept it in your microservice by makign a filter that inherits OncePerRequest and call this on doFilter Internal:

String authHeaderParam  = request.getHeaders(HttpHeaders.AUTHORIZATION).nextElement();
TensaDev0
Related