Spring/spring boot authorisation using JWT tokens

Question

Looking for suggestions on how to go about with microservices authorisation.

I'm using the spring/spring boot for all them microservices

I'm able to authenticate via spring cloud gateway before reaching the actual microservices using JWT tokens however when it comes to authorisation i'm unsure on how to do it.

I would like handle the authorisation internally for each of the endpoints in the business microservice.

Is there a way to pass the JWT token to the microservice or do i need to call the authserver to get the roles within the user ?

Max Peng · Accepted Answer · 2022-02-17 06:00:21Z

1

Actually, both works.

You can put the roles in the token, when you need it, decode it. Or decode it in the gateway and pass it all the way.
If you don't want to put too much data in the token, you can call the auth server as needed.

answered Feb 17, 2022 at 6:00

Max Peng

3,4451 gold badge32 silver badges46 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Spring/spring boot authorisation using JWT tokens

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related