Securing Microservices with API Key Based Auth - Spring Cloud Gateway | JavaTechie

This tutorial will guide you How to secure your microservices with an API key using Spring Cloud Gateway.

We are going to discuss an architecture in which one microservice will act as a api gateway service which does central authentication, redirect an incoming request to other microservices. The main advantage of this architecture is you can easily add multiple microservices to the system and all authentication, authorization will be taken care from a central unit

#javatechie #Redis #Microservice #APIGateway #Security

GitHub:

Blogs:

Facebook:

guys if you like this video please do subscribe now and press the bell icon to not miss any update from Java Techie

Disclaimer/Policy:
--------------------------------
Note : All uploaded content in this channel is mine and its not copied from any community ,
you are free to use source code from above mentioned GitHub account

[vivekanandhanm]

Concepts are explained very well. 👌
Thank you for your effort.
Please do the video for token-based authorization for the Spring Cloud Gateway.

[vinaykulkarni]

Awesome tutorial. Thanks a lot for sharing. Please add a video on how to secure communication within microservices. Thanks

[hrajiv]

Thanks for covering a very good topic, I have gone through other videos of your channel, but in this video I feel explanation should be better, what you are doing in coding pls give a big picture in pictorial view and explain each class's purpose.

[sudhakarpatnapu]

Thanks for all detailed videos. can you please make video to show session management to hold user data between multiple microservices?

[sandipjagdale]

Everything you explained is very easy to understand. Thanks
Please create a video on central config.

[yoogeshsharma]

Hi java techie, most of the industries uses istio with ingress gateway now a days. Whatever you configured on spring api gateway can be configured on ingress istio gate way too. There you can even pass request on a percentage basis.so is spring gateway really needed? If it needed then, where does it fit in an environment where we have kubernetes infrastructure with istio on top of it to manage the service mess and request is comming via loadbalancer which is ingress controller.

[joyprakash]

Hey Bro nice video, I f you will get time then Kindly add tutorial for OAuth2 at api gateway

[AnilKumar-dtsq]

Hello Sir, I am completely habituated to your channel and mostly follow all the concepts from JavaTechie. However I would request you to please provide a session on how to provide jwt based authentication in spring cloud gateway for multiple microservices. Thanks a lot for this wonderful knowledge sharing 👍

[asifhasan]

Sir, how i can do the same things using JWT? let's suppose I have 3 microservices with 3 different MySQL DB and I want to build an authentication bridge between them using JWT. How I can do this? please guide me.

[srndrpec]

Java Techie, wonderful job
I have a suggestion: Please start with a simple application like using constants for the authorization part, Then later introduce Redis like components mentioning pitfalls of a simple approach.

[FarooqSyed-kbgw]

Hello @JavaTechie . awesome tutorial, to the point, and very informative. Did you make a spring cloud with JWT which mention in the tutorial?

[manojyadav-wkbu]

Please create video for JWT authentication based on token as well

[ankitjain]

How i can restrict accessing students or course service directly like //localhost/8081 should be restricted

[amarjargalamraa]

this video is nice can you help me :D how to use security, generate tokens and check that token bearer is accessing other services java spring boot and Spring-boot-gateway-cloud

[manjosh]

Can you also share how to enable CSRF in spiring cloud gateway and add the CSRF token to every response headers.

[poojapatole]

Thank you for all the efforts you take in each video. I have a suggestion: Including 2 different concepts makes it more hard to understand. I have never worked with Redis and I searched the video to understand Spring security for Srping cloud. But I am totally confused now as there is redid being used here. This approach is very complex for me to understand. It would be nice if you made dedicated video just for API Key maybe by using in-memory structure. Nonetheless, thank you for sharing your knowledge.

[prog_ramming_brains]

Hi can you make a video on securing the microservices using SSL

[pavanim]

Hi, Thanks for the awesome explanation.Can you please do one video with kubernetes service mesh implementation for spring boot microservices.

[haykharutyunyan]

Can we just use constant and compare keys without store and then getting from Radis? I just want to understand can it work without storing and then getting Keys from Radis or some other DB?

[saudsiddiqui]

Please make a video on Kinesis Data Stream AWS for both input and output steam.