Spring Cloud Gateway for Stateless Microservice Authorization

October 16, 2019

Improving and maintaining tech agility, time to market, and application modernization is challenging as the number of microservices we own and manage grows. How do you track who uses your applications? How can you establish and enforce common policies or flows to authenticate and authorize permissible use? How can you ensure effective governance? In this talk, we'll share the approach at TD Ameritrade to solve these cross-cutting functions in an efficient and effective way. We'll discuss why and how we decided on API Gateway using Spring Cloud Gateway; the different use cases we're solving; our implementation for authentication and authorization leveraging IDP, OAuth2, and JSON web tokens; and how we brought the whole solution together for microservices running on Pivotal Platform. Architects and developers attending this talk will see how the API Gateway pattern can help to successfully modernize web platforms with greater tech agility and faster time to market. Speakers: Saravanan Paramasivam; Software Engineer, TD Ameritrade; Chris Jackson; Senior Developer, TD Ameritrade; Taher Saif; Sr. Manager, TD Ameritrade Filmed at SpringOne Platform 2019 Slides: https://www.slideshare.net/SpringCentral/spring-cloud-gateway-for-stateless-microservice-authorization

Previous
The Value Of Reactive Systems
The Value Of Reactive Systems

In the Java world, it's been a couple years since Spring Framework 5 and Spring Boot 2 have published their...

Next Video
From Idea to Dev to Ops - E.g. We’re Not SCPing WARs To Snowflake Servers Anymore
From Idea to Dev to Ops - E.g. We’re Not SCPing WARs To Snowflake Servers Anymore

Enterprise app dev used to be simple: you’d build some servlets and JSPs, create a WAR, and SCP it to your ...