In this chapter, we will see how we can secure access to the APIs and web pages exposed by the edge server introduced in the previous chapter. We will learn to use HTTPS to protect against eavesdropping on external access to our APIs and also how to use OAuth 2.0 and OpenID Connect to authenticate and authorize users and client applications to access our APIs. Finally, we will study the use of HTTP basic authentication to secure access to the discovery service, Netflix Eureka.
The following topics will be covered in this chapter:
- An introduction to the OAuth 2.0 and OpenID Connect standards
- A general discussion on how to secure the system landscape
- Adding an authorization server to our system landscape
- Protecting external communication with HTTPS
- Securing access to the discovery service, Netflix Eureka
- Authenticating and authorizing API access using OAuth...