Microservice Security with OAuth 2 and JSON Web Tokens

In this chapter, we will take a look at microservices-based architectures and look at how OAuth 2 with JSON Web Tokens (JWT) plays a role in securing microservices in a Spring-based application.

The following is a list of topics that will be covered in this chapter:

• The general difference between monolithic applications and microservices
• Comparing service-oriented architectures (SOA) with microservices
• The conceptual architecture of OAuth 2 and how it provides your services with trustworthy client access
• Types of OAuth 2 access tokens
• Types of OAuth 2 grant types
• Examining JWT and their general structure
• Implementing a resource server and authentication server used to grant access rights to clients in order to access OAuth 2 resources
• Implementing a RESTful client to gain access to resources through an OAuth 2 grant flow
...