Reputation: 539
I've used eureka and zuul proxy to implement jwt validation for a few microservices.Basically, the frontend now sends it's requests to the proxy where the token will get validated and if it's ok then it will forward the request to the specific microservice.My concern is that all of those microservices don't have any type of security so anyone could easily call their endpoints without any problems. What would be the best solution here? are there ways to accept requests only coming from the proxy?
Upvotes: 1
Views: 136
Reputation: 844
Proper setup of CORS does the job
Link to the Spring boot CORS setup guide
Upvotes: 1