SAP Cloud Foundry Security | XSUAA | App Router | JWT Token | Secure Microservice in BTP

Authentication services provided by the xsuaa service on SAP Cloud Platform or SAP HANA XS Advanced rely on usage of the OAuth 2.0 protocol and OAuth 2.0 access tokens. In this first video of the series, we provide an introduction to the topic and cover SAP BTP security, Cloud Foundry security, and the UAA and XSUAA services. Understanding of JWT tokens issued by XSUAA and how it communicates with IDP using SAML.
Understand the purpose of App Router in layman way. No prior experience required to learn concepts of cloud foundry Security.

- We first start with a theoretical overview of Security and Authentication in the SAP Cloud Foundry Using XSUAA
-We create Scope(Roles), Role Template and Role Collections and Assign it to User
- We then create the JWT token handling module in our previous Spring Boot Java Application(Last Week Code)
- First, we perform the step manually with Postman to see how the token-passing process is carried out by manually creating a token from XSUAA and using it to Authorize ourselves.
- Then we use a NodeJS Approuter to automate the process of token passing, define routes in Approuter and deploy both Spring Boot App and Approuter to SAP Cloud Foundry
- After that we work with NodeJS service development, we spend a few minutes to learn NodeJS With Express Basics for new learners on Node and Express
- Once we have some simple working API creation experience we explore how to connect to HDI container (or HANA DB) from NodeJS App
- We extract data from HDI container(or HANA DB) and pass it as an API endpoint
- We have now a Microservice App working in SAP Cloud Foundry with NodeJS, Java Spring and Approuter
- Now we also make the NodeJS API Secure by using XSUAA Service and Passport Module With JWT Token Strategy
- In the end, we create a Simple UI5 App Hosted With NodeJS App in SAP Cloud Foundry which uses the NodeJS API End Point

In this section, we have covered all steps from Scratch and in a step-by-step manner. The key point you will learn in this section are:

- Practice implementation of Security Token Auth
- Decode Secrets of JWT Token Obtained by XSUAA
- XSUAA Backing Service Creation
- Creating YML Files for deployments in Cloud
- Microservice App Development, Deployment and Debugging
- NodeJS and ExpressJS API App Development
- NodeJS and HANA DB/HDI Container Connection
- Approuter Creation and Use in SAP Cloud Foundry
- Hosting UI5 Application With NodeJS App in Microservice Scenario

▶ What we have Covered in the Course

➜ Cloud Platform - SAP BTP Cloud Foundry, SAP Cloud Foundry
Why Cloud and Understanding of PaaS vs IaaS Model
Cloud Foundry Basics Overview, Usage, Hands-on on BTP Cloud Foundry With CLI, Buildpack Usage and Inner Working
- Architecture and functioning of Cloud Foundry

➜ Cloud Foundry - Setup, Development, Deployment, Scale and CI/CD implementation
- Understanding Setup of Cloud Foundry for Enterprise Scenario
- Building Apps and Managing Apps With Cloud Foundry
- CLI Centric Task on Cloud Foundry, SCP and Neo

➜ Native App Development With Java Spring Framework for Side-by-Side Extention
Step-by-step App Creation for Side-by-Side Extention Using Java Spring
Understanding and Working With Spring Java Framework
-12 Step App Model for Cloud-Native App Creation

➜ YAML Code - MTAs and Config Files
- Deep into YAML Code and Syntaxes
- How to Create manifest files for Cloud Apps
- Using YAML Code for Container management

➜ Docker - Containers and DevOps
Understanding Docker from Basic
Docker Usage, Management, Development, Deployment to Cloud Foundry and Scale
Creating Complex Project With Docker Image and Scenarios for Cloud Development
- Container Management
- Basic Overview of Container Management Applications
- Overview and Usage of Kubernetes
- Exploring Alternative and Scenarios

➜ Microservice Apps - Different Buildpacks and types
- Building Microservice Based Apps
- Understanding Patterns and Anti Patterns
- Developing, Deploying, Testing Microservices Scenarios

➜S/4 HANA SDK Development with Node JS
Understanding Library and functionalities of S/4 SDK
Building Apps Using S/4 HANA SDK in Side-by-Side Extention
Deploying in Cloud and Scenarios

➜ Using Jenkins to Automate CI/CD and pipelines
Understanding the usage of Jenkins and Pipeline Creation
Using Jenkins building project Automation
CI/CD Scenarios Using Jenkins

➜ Security and Monitoring of Cloud Apps
How to Provide Security to Cloud Apps
Internal Protocols and Architectural Structure for Production Scenarios for Security and Data Integrity
Monitoring Cloud Apps With Code, CLI and 3rd Party Tools

sap btp security
sap xsuaa
sap cloud foundry security
sap app router
sap cloud platform security
sap spring security with role collections
security sap cloud

[rahuljain_]

Hello SAP Enthusiasts,

I am in the midst of architecting a SAP CAP-based backend coupled with SAP UI5 on the frontend. The objective is to weave in Authentication and Authorization functionalities, particularly utilizing XSUAA, while user credentials are securely stored in the HANA Cloud Database.

Imagine we have a login page. Upon entering their details and hitting the submit button, the system is designed to authenticate users against the records in the HANA Cloud Database. Successful authentication would result in the issuance of a token, which is then used to authorize subsequent API requests.

I would appreciate any insights or guidance on how to effectively implement this requirement.