Failing at Auth* by succeeding at Microservices

No ratings

Presented at LASCON2018 2018 by

DevOps, MicroServices , Auth , What could go wrong?MicroServices are awesome, so are DevOps & OAuth. But doing those isn’t enough if you haven’t worked through your security principles - including authorization & authentication.We’ll discuss the challenges that arise when implementing authentication and authorization in these complicated micro service architectures. We target commonly misinterpreted authorization frameworks like Oauth 2.0 for user authentication and demo the ways an attacker can exploit these weaknesses.There are good practices you can adopt to scale your authentication and authorization implementations to establish trust across micro service architectures - if you know about them, and knowing is half the battle. We will share out findings that can help you fortify your services.