JHipster rest api 只允许微服务

Question

I have a JHipster Microservice application in which there is a dependency between 2 microservices, msA and msB.

1. A user makes a rest call to msA
2. msA processes the request and makes an AuthorizedFeignClient call to a rest endpoint on msB to perform some other logic with the user.

My problem is, the logic performed in msB is only internal, needs to know the user and should not be exposed to the outside user. How can I restrict the rest endpoint on msB so that only another microservice can make requests to it and not a public user?

Answer 1

• require some specific role for this endpoint and assign this role to an internal user that msA will use. Both oauth2 and uaa auth types in JHipster define an internal client id and secret that you can customize for this use case.
• do not expose this endpoint as a route of your API gateway through Zuul routes configuration in gateway's application.yml as inter-service communication does not go through gateway