Security is a key requirement of every enterprise system. In this chapter, we will learn how to effectively secure Quarkus services using a variety of approaches. The first approach we will put into practice embeds the security layer within our service. This can still be considered a valid solution for rapid application development and testing. On the other hand, when moving our service into production, we need to avoid this extreme centralization. Therefore, the next strategy we will learn about is how the Quarkus service can connect to a distributed security system such as Keycloak. The last topic in this chapter is about encrypting the HTTP channel through some easy configuration steps.
In this chapter, we will cover the following topics:
- Securing our customer service
- Securing Quarkus services with Elytron
- Securing Quarkus services with Keycloak