Information Security

Questions tagged [microservices]

Ask Question

The tag has no usage guidance.

6 questions
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
0
votes
0answers
34 views

JWT Propagation Across Services

I am looking into using OpenID Connect as a means of authentication across potentially multiple microservices. Consider the following chain of events: Client successfully obtains an access token, ...
1
vote
1answer
77 views

Disable SSL verification between isolated microservices

I have an internet isolated EC2 instance which is a Ruby client and it is connecting with multiple EC2 servers of mine in the same network having different sub-domain names. These EC2 servers are ...
1
vote
0answers
36 views

Generate new AccessToken each time user update his Information

im building a PWA app , where i implemented jwt token to auth users. i have 2 main architecture problems ,but let me introduce you what im building . i'm Building application that is all about dog ...
0
votes
0answers
45 views

Endpoint authorization using Vault

I have a bunch of micro-services set up which interact with each other. I want to set up authentication and authorization within these services so if a user has access to only one service, then it can ...
0
votes
1answer
148 views

Microservice security: How to perform authorization + services also need auth checks individually?

I have the following architecture for accessing a REST service that requires authentication: Oidc token flow managed at the client Access token verified at the server in the auth service (proxied ...
2
votes
1answer
100 views

Is it necessary to protect the Oauth2 return URL

I am thinking to implement a REST service that needs to call another REST service that is protected by OAuth2. My service is "always" called server to server by web applications. The user interacts ...