Securing the frontend
In Chapter 3, Taming the Presentation Tier, we covered the concepts of micro frontend architecture. In this section, we look at the security of the presentation tier. First, we will provide authentication with OpenID Connect (OIDC). Then we will add role-based authorization with conditional rendering and routing. Finally, we will pass the JSON Web Token (JWT) along on BFF calls to help secure the service side.
OpenID Connect
User authentication is the first step in securing the presentation tier. We need to identify the user so that we can determine what we will allow them to see and do. Traditionally, teams spent many cycles building an authentication system. Today, we can accelerate delivery by leveraging the OIDC specification and SaaS identity providers.OIDC is a simple identity layer on top of the OAuth 2.0 specification. It defines the authentication flows and adds the identity token (that is, idToken). The identity token provides information about the user...
