配置Zuul代理下游的身份验证 (Configuring Authentication Downstream of a Zuul Proxy) | Spring Cloud SecuritySpring Cloud Security offers a set of primitives for building secure applications and services with minimum fuss. A declarative model which can be heavily configured externally (or centrally) lends itself to the implementation of large systems of co-operating, remote components, usually with a central indentity management service. It is also extremely easy to use in a service platform like Cloud Foundry. Building on Spring Boot and Spring Security OAuth2 we can quickly create systems that implement common patterns like single sign on, token relay and token exchange.中文文档|Spring官方文档|SpringBoot 教程|Spring中文网

Spring Cloud 安全性 Spring Cloud Security offers a set of primitives for building secure applications and services with minimum fuss. A declarative model which can be heavily configured externally (or centrally) lends itself to the implementation of large systems of co-operating, remote components, usually with a central indentity management service. It is also extremely easy to use in a service platform like Cloud Foundry. Building on Spring Boot and Spring Security OAuth2 we can quickly create systems that implement common patterns like single sign on, token relay and token exchange.

配置Zuul代理下游的身份验证

你可以通过proxy.auth.*设置控制零下游的授权行为。例如:spring-doc.cadn.net.cn

application.yml

proxy:
  auth:
    routes:
      customers: oauth2
      stores: passthru
      recommendations: none

在本示例中，"customers" 服务会获取 OAuth2 Tokens中继， "stores" 服务会获取直接传递（授权头只是传递到下游），而 "recommendations" 服务会移除授权头。默认行为是在有Tokens可用时进行Tokens中继，否则进行直接传递。spring-doc.cadn.net.cn

见 ProxyAuthenticationProperties获取完整细节。spring-doc.cadn.net.cn