Collaborate Disseminate
Let say I have “transactions” and “users” services managing transactions and users data respectively. Transaction record only has sender user id, but on display I want to show sender’s email. I also want to keep “transactions” as decoupled… Continue reading Encrypted ids to break inter-service dependencies
Tell me how to solve the problem in Kafka.
There is a consumer and a producer. Each of them is scaled to 6 copies. Both applications work with the same topic. There are 6 partitions in the topic.
The problem is that when a message is consu… Continue reading How to implement publishing and consuming messages in Kafka without delays [migrated]
Tell me how to solve the problem in Kafka.
There is a consumer and a producer. Each of them is scaled to 6 copies. Both applications work with the same topic. There are 6 partitions in the topic.
The problem is that when a message is consu… Continue reading How to implement publishing and consuming messages in Kafka without delays [migrated]
I’m working on configuring my suite of services (in different domains) so that they can all be accessed via Single Sign-On. I’m using AWS Cognito as a wrapper around a SAML Idp (Azure AD).
What I would like to figure out is: how can I make… Continue reading OAuth2 System Design for Single Sign-On | Auto-Detect Session?
I have a microservice which sole purpose is to serve as a cache for other microservices. The point of the cache is to speed up processing, but the strong password hash algo counter that purpose. (Company policy require all service to be se… Continue reading Weak password hash + strong rate limiter = secure?
All enterprise organizations are, in essence, software publishers, regardless of their industry. This is because every enterprise relies on custom software applications for managing internal processes, interacting with customers, or analyzing data, mak… Continue reading What AppSec and developers working in cloud-native environments need to know
We are developing a system that comprises of
Component A: Client Application
Component B: Gateway API
Component C: Backend Web API providing functionality (will be a set of
microservices C1, C2 etc)
All components are registered applicat… Continue reading Authorizing Access using AD with an API Gateway
IT organizations looking to continue their digital transformation journey are faced with a choice – choosing between a more cost-effective, simple monolithic system or a more agile but time-consuming and expensive microservices infrastructure. What’s t… Continue reading How to secure microservices using authorization
At a high level based on the technology of event store and streaming (i.e. Apache Kafka, Amazon Kinesis, etc.) to decouple systems and make them event driven systems. I was wondering what new architectural risks this would pose such as whe… Continue reading Security Risks with Event Streaming
Here’s the deal. This might probably be a known best practice, but I haven’t been able to find anything on the matter.
Suppose company X has a public facing web API server, and a public OAuth Identity Server. Its clients will get a token f… Continue reading Using public OAuth tokens to authorize access to internal services