Hands-On Microservices with Spring Boot and Spring Cloud

Calling protected APIs using access tokens

Now, let's use the access tokens we have acquired to call the protected APIs!

1. First, call an API to retrieve a composite product without a valid access token:

ACCESS_TOKEN=an-invalid-tokencurl https://localhost:8443/product-composite/2 -k -H "Authorization: Bearer $ACCESS_TOKEN" -i  

2. It should return the following response:

The error message clearly states that the access token is invalid!

3. Next, try using the API to retrieve a composite product using one of the access tokens acquired for the reader client from the previous section:

ACCESS_TOKEN={a-reader-access-token}curl https://localhost:8443/product-composite/2 ...