Building Microservices with Go

Security

Out of the box, Micro does not have an explicit authentication or authorization layer, and I believe this is a good thing. It would be relatively trivial to implement your authentication into the service framework using JWT, or, if you really must, your proprietary format. Request validation is handled in part by Protocol Buffers. However, it should be possible to do more complex validation using something like govalidator (https://github.com/asaskevich/govalidator). However, since you cannot directly modify the request objects to add the fields tags required, you may have to jump through a few hoops here. The issue with validation, however, is more to do with the Protocol Buffers framework, not Micro.

From a secure communication ...