Decoupled Drupal in Practice: Architect and Implement Decoupled Drupal Architectures Across the Stack

© Preston So 2018

Preston SoDecoupled Drupal in Practicehttps://doi.org/10.1007/978-1-4842-4072-4_9

9. Authenticating Requests in Drupal 8

Preston So¹ 

(1)

Ridgewood, NY, USA

 

Among the most important areas of concern for decoupled Drupal architecture is security. By nature, decoupled Drupal introduces substantial security concerns that have implications for the data stored in Drupal as well as the safety of users who access Drupal content through a consumer. Indeed, one of the drawbacks of decoupled Drupal cited in Chapter 6 was the increased onus on developer teams to build in robust authentication.

There are three approaches in Drupal 8 for authentication that are relevant to decoupled Drupal. Basic Authentication and OAuth2 Bearer Token authentication ...