Authorize Curl requests to microservices
I have microservices architecture and want to add authorization and authentication (JWT/Oauth2) for curl/Postman requests.
Microservices running inside docker containers.
I don't want to modify existing services and prefer such schema:
- I tried to use oauth2-proxy with keycloak, but it offers sign in by web interface.
- This SO question (Microservice Authentication strategy) didn't help me.
- Diged in Envoy External Authorization envoy front-proxy example. But it need to add envoy instance for each microservice and have simple auth check.
Questions:
- Is there another ready-to-use solution?
- Can you suggest direction or technology to continue research?
- Or it will be easer to write own auth service, working in pair with reverse-proxy and Auth Provider (Keycloak)
Solution
Input data: oauth2-proxy, keycloak, nginx, one API - service - working together in docker containers. Authentication by OAuth2.
Solution:
I simulated web logging in by python according to this video Python Requests login and persistent sessions tutorial
It is more simple than using python requests-oauthlib library or Postman, curl requests.
- What If Session Expires While User Is Still On The Website
- Remix run: Authentication succeeds on validation failures
- WMS service basic authentication
- How to manage user claims?
- How to get the popup menu to select user certificate in Tomcat 10 server?
- Enable password and unix_socket authentication for MariaDB root user?
- How to consume from an eventsource API requiring auth headers?
- How to display an Error message when logging in fails in Reactjs
- Notify navbar of authenticated status when logged in (Angular)
- Proper way to store a token retrieved client-side in nextjs 13 "App Router" version?
- Signout and login not working in auth.js in Next14 with middleware and server actions
- Laravel: Auth::user()->id trying to get a property of a non-object
- 404 page not found when running firebase deploy
- .NET 8 Blazor Server - role authorization with Windows Authentication
- Error: "OrganizationFromTenantGuidNotFound" (even with Microsoft 365 subscription)
- Symfony2: How to change Entity Manager just before doing login_check
- JWT signature verification failing
- SMAppService register() - How to detect launch at startup/login vs regular launch?
- AppwriteException: User (role: guest) missing scope (account), not able to get account after creating a session
- authMiddleware doesn't exist after installing clerk
- Stop request in CookieAuthenticationEvents.OnValidatePrincipal after response body has been written to
- Blazor Hosted WebAssembly with Keycloak and Basic Authentication Issue
- How to change the app name for Firebase authentication (what the user sees)
- How do I restrict Apache/SVN access to specific users (LDAP/file-based authentication)?
- Unexpected authorization behaviour in a Blazor Web App with .NET 8
- MongoDB: Understand createUser and db admin
- Update react context without refreshing page on state update
- What is the standard/modern way to use CAC/PIV card authentication in Java/Tomcat web applications?
- Keycloak retrieve custom attributes to KeycloakPrincipal
- Secure Google Cloud Functions http trigger with auth