hard20 pts · first answer countsauthenticationtokensservice-auth
One token accepted by every service
The gateway forwards the user's access token to 12 internal services, and the token's audience lists all of them. If one service leaks it, it works everywhere. What is a better design?
Discussion 0
Join free to post in the discussion.
Related questions
- How to store passwordsBackend Developer
- What HttpOnly does on a cookieBackend Developer
- Authentication versus authorizationBackend Developer
- What a password salt is forBackend Developer
- Is HTTP Basic auth encryptedBackend Developer
- Sending an access token to an APIBackend Developer
- What the Secure cookie flag doesBackend Developer
- Header that goes with a 401Backend Developer