Base solution for your next web application
Open Closed

Microservices and Authorization #9161


User avatar
0
Siyeza created

Hi,

We have a requirement to host some of our modules into their own Docker containers in order to achieve a microservice architecture. Some of these modules will expose their services as Rest APIs.

Assume the user has logged via the Web Host application. The user performs some operation that intiates a service call to one of these microservices.

Will the Web Host pass the relevant authorization and tenant headers to the microservice when performing the service request? If so, will the microservice be able to the perform the standard ABP authorization checks, such as checking roles and permissions?

Thanks


2 Answer(s)
  • User Avatar
    0
    ismcagdas created
    Support Team

    Hi @Siyeza,

    Host project will not include auth header by default. You can check how AspNet Zero's Xamarin app includes auth header and implement a similar approach.

  • User Avatar
    0
    Siyeza created

    Thank you