Building Microservices with .NET Core
by Soumya Mukherjee, Gaurav Aroraa, Lalit Kale, Manish Kanwar
Security
The traditional approach of having a single point of authentication and authorization worked well in the monolithic architecture. However, in the case of microservices, you would need to put efforts into doing this for each and every service. This would pose a challenge of not only implementing the same but keeping it synchronized as well.
The OAuth 2.0 authorization framework and OpenID Connect 1.0 specifications combined together can solve the problem for us. OAuth 2.0 describes all the roles involved in the authorization process that suffices our needs pretty well. We just have to make sure that the right kind of grant type is picked up; otherwise, the security will be compromised. OpenID Connect authentication is built on top ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access