The traditional approach of having a single point of authentication and authorization worked well in the monolithic architecture. However, in the case of microservices, you would need to put efforts into doing this for each and every service. This would pose a challenge of not only implementing the same but keeping it synchronized as well.
The OAuth 2.0 authorization framework and OpenID Connect 1.0 specifications combined together can solve the problem for us. OAuth 2.0 describes all the roles involved in the authorization process that suffices our needs pretty well. We just have to make sure that the right kind of grant type is picked up; otherwise, the security will be compromised. OpenID Connect authentication is built on top ...
