As you know, microservices are the components that we deploy in on-premises or cloud infrastructures. Microservices may offer APIs or web applications. Our sample application, OTRS, offers APIs. This chapter will focus on how to secure these APIs using Spring Security and Spring OAuth2. We'll also focus on OAuth 2.0 fundamentals, using OAuth 2.0 to secure the OTRS APIs. For more understanding on securing REST APIs, you can refer to the RESTful Java Web Services Security, Packt Publishing book. You can also refer to the Spring Security, Packt Publishing video for more information on Spring Security. We'll also learn about cross-origin request site filters and cross-site scripting blockers.
In this chapter, we will cover the following topics:
- Enabling Secure Socket Layer (SSL)
- Authentication and authorization
- OAuth 2.0
