Securing Microservices with Auth0 and MicroProfile in Kubernetes without a hassle
summary
Combining Auth0 with MicroProfile on Kubernetes claims to let Java teams stop reinventing auth and it proves the point: a live demo builds three microservices plus a frontend, issues JWTs with roles (admin / speaker / attendee), propagates the Authorization header across service calls, enforces role checks, and deploys as Docker images into Kubernetes. The setup works end-to-end, highlights token lifetime and blacklist caveats, and uses an Auth0 rule to inject namespaced role claims.
AI-written summary · about
chapters (12)
- 0:00Start
- 1:53Security is Hard!
- 4:01Consider Identity Platforms
- 8:09Securing Microservices
- 12:57JSON Web Tokens
- 14:47About MicroProfile
- 17:32MicroProfile Vendors
- 18:18JWT Propagation
- 20:07Payara Micro
- 21:13Demo: Conference Event Management
- 23:04Demo: Roles
- 56:19Questions?
related talks
38mSecure Microservices Made Easy with MicroProfile JWT
39mMicroservice Security via MicroProfile JWT
50mMaking Microservices Micro with Istio & Kubernetes
57mA New and Open Way to Build Cloud-Native Microservices - MicroProfile
34mCloud Native development with Eclipse MicroProfile on Kubernetes
31mAuthentication and Security in gRPC Microservices
46mSecure your Microservices with ZeroTrust approach
49mDeveloping microservices applications on the Kubernetes platform
