Spring Cloud Security With Zuul

See the spring cloud project page for details on setting up your build system with the current spring cloud release train.

Spring cloud security with zuul.

The application is just an oauth 2 0 resource server. Spring cloud table of contents. Microservice registration and discovery with spring cloud using netflix eureka part 2. A declarative model which can be heavily configured externally or centrally lends itself to the implementation of large systems of co operating remote components usually with a central indentity management service.

Configuration management service discovery circuit breakers intelligent routing micro proxy control bus one time tokens global locks leadership election distributed sessions cluster state. Specifically it makes oauth2 based sso easier with support for relaying tokens between resource servers as well as configuring downstream authentication using an embedded zuul proxy. More details on spring s support for zuul can be found in the official spring cloud zuul documentation. Dependency groupid org springframework cloud groupid artifactid spring cloud starter netflix zuul artifactid version 2 0 2 release version dependency 3.

The spring cloud security module provides features related to token based security in spring boot applications. Security in the cloud certainly becomes more complicated. Microservice registration and discovery with spring cloud using netflix eureka part 1. The application that we d like to route through zuul contains an oauth 2 0 authorization server which grants access tokens and a resource server which accepts them.

But with the help of spring security and spring session we can easily solve this critical issue. Routing behaviour can be customized with filters. I may not be able to open source the exact code at the time but here s the idea. As an edge service application zuul is built to enable dynamic routing monitoring resiliency and security.

Using zuul and spring session we can log users in only one service and propagate that authentication to our entire. You don t need to implement the token validation yourself. We ended up building an api gateway with spring cloud zuul spring security oauth 2 0. With spring cloud you can easliy integrate a zuul proxy in your application.

Spring cloud provides tools for developers to quickly build some of the common patterns in distributed systems e g. This allows you the configuration of routes in yml or properties files.