Security
The traditional approach of having a single point of authentication and authorization worked well in the monolithic architecture. However, in the case of microservices, you would need to do this for each and every service. This would pose a challenge of not only implementing it but keeping it synchronized as well.
The OAuth 2.0 authorization framework and the OpenID Connect 1.0 specifications combined together can solve the problem for us. OAuth 2.0 describes all the roles involved in the authorization process that meets our needs pretty well. We just have to make sure that the right grant type is picked up; otherwise, the security will be compromised. OpenID Connect authentication is built on top of the OAuth 2.0 protocol.
Azure ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access