In the e-commerce microservice application in Chapter 17, you should have noticed that there are few API methods, especially those in the product category and product services which are freely accessible by anyone; however, for accessing all other microservices you need to be logged in either as the back office admin or as a customer who has already created a user profile in the application. So far, so good, but how secure are those microservices even though you need to be logged in?
Quite different from the traditional monolith architecture ...