No post body was provided.
Ask HN: How do you handle authentication and authorization between microservices
1–10 of 17 posts
Re: Ask HN: How do you handle authentication and authorization between microservices
#2API keys typically
Re: Ask HN: How do you handle authentication and authorization between microservices
#3[deleted]
Re: Ask HN: How do you handle authentication and authorization between microservices
#4System user permissions with public/private keys for lower level APIs (SSH tunnels, basically).
Centralized token services for ReST APIs
Re: Ask HN: How do you handle authentication and authorization between microservices
#5JWT tokens are a decent approach
Re: Ask HN: How do you handle authentication and authorization between microservices
#6Vaulted API keys with lifecycle management.
Re: Ask HN: How do you handle authentication and authorization between microservices
#7Take a look at the Microprofile JWT specifications. It provides a standard set of jwt claims: https://www.eclipse.org/community/eclipse_newsletter/2017/se...
Re: Ask HN: How do you handle authentication and authorization between microservices
#8Re: Ask HN: How do you handle authentication and authorization between microservices
#9I used to work for a company that has a solution for this exact problem: http://www.tribestream.io Great product and the people couldn't be a more diverse and all around good group of people.
Re: Ask HN: How do you handle authentication and authorization between microservices
#10JWTs are a good approach. I've also seen folks using mTLS with gRPC.