Microservices Security
摘要
In the ecommerce microservice application in Chapter 17 , you should have noticed that there are few API methods, especially those in the product category and product services, which are freely accessible by anyone; however, for accessing all other microservices, you need to be logged in either as the back-office admin or as a customer who has already created a user profile in the application. Although logging in is required, how secure are those microservices?