Our micro-service echo system is based on Spring-boot, and all requests are routed through a Spring-cloud API gateway. For our business services, we need to verify the authorization of users' requests. To maintain and check user groups and their access to system artifacts, we developed a service called Access. API-Gateway requests are authenticated by an OATH2 server and returned with a JWT. What is the best configuration for Spring cloud API-Gateway so that it authorizes all HTTP requests by the access server and then passes them to services?
0 Answers
Related