Breaking News: Grepper is joining You.com. Read the official announcement!

sharing user context between your microservices

Pragya Keshap answered on February 7, 2023 Popularity 1/10 Helpfulness 1/10

answer sharing user context between your microservices

sharing user context between your microservices

Comment

There are many ways how you can preserve the user identity in downstream microservices. Here are two of them:

1) Use Spring Session. It gives you the ability to distribute a user session across microservices by simply adding a dependency.

2) Pass the original user's token to downstream calls and have the same Spring Security configuration there.

In both cases, you will be able to get a username from SecurityContextHolder.

@PreAuthorize("hasAnyAuthority('USER_READ', 'USER')")
@GetMapping(value = "/{id}", produces = {MediaType.APPLICATION_JSON_VALUE})
public ResponseEntity<EntityModel<UsersResponseModel>> getUserById(@PathVariable("id") String id) {
    UsersResponseModel respModel = new UsersResponseModel();
    Optional<Users> user = usersSvc.findById(id);
    if(!user.isPresent()) {
    throw new UserExceptions.UserNotFoudException(ErrorsMappings.USER_NOT_FOUND_MESSAGE);
    }
    respModel.setUser(user.get());
    respModel.setCode(HttpStatus.OK.value());

    EntityModel<UsersResponseModel> entity = EntityModel.of(respModel);
    entity = usersProcess.generateHateoas(entity, this, "view-user", user.get().getId());
    return new ResponseEntity(entity, HttpStatus.OK);
}

https://security.stackexchange.com/questions/242881/propagating-user-context-between-microservices-secured-with-m2m-jwt-tokens

Popularity 1/10 Helpfulness 1/10 Language java

Source: Grepper

Tags: between java microservices sharing

Link to this answer
Share Copy Link

Contributed on Feb 07 2023

Pragya Keshap

0 Answers Avg Quality 2/10

sharing user context between your microservices

Contents

More Related Answers

sharing user context between your microservices

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.