Securing the system landscape

To secure the system landscape as described in the introduction to this chapter, we will perform the following steps:

• Encrypt external requests and responses to and from our external API using HTTPS to protect against eavesdropping
• Authenticate and authorize users and client applications that access our APIs using OAuth 2.0 and OpenID Connect
• Secure access to the discovery server, Netflix Eureka, using HTTP basic authentication

We will only apply HTTPS for external communication to our edge server, using plain HTTP for communication inside our system landscape.

In the chapter on service meshes (Chapter 18, Using a Service Mesh to Improve Observability and Management) that will appear later in this book, we will see how we can get help from a service mesh product to automatically provision HTTPS to secure communication inside a system landscape.

For test purposes, we will add a local OAuth 2.0 authorization server to our system landscape. All external...