Microservice Security with OAuth 2 and JSON Web Tokens
In this chapter, we will look at microservices-based architectures and look at how OAuth 2 with JSON Web Tokens (JWT) plays a role in securing microservices in a Spring- based application.
The following is a list of topics that will be covered in this chapter:
- The general difference between monolithic applications and microservices
- Comparing Service-Oriented Architectures (SOA) with microservices
- The conceptual architecture of OAuth 2 and how it provides your services with trustworthy client access
- Types of OAuth 2 access tokens
- Types of OAuth 2 grant types
- Examining JWT and their general structure
- Implementing a resource server and authentication server used to grant access rights to clients in order to access OAuth 2 resources
- Implementing a RESTful client to gain access to resources through an OAuth 2 grant flow
We have quite a few items to cover in this chapter, but before we dig...