Microservice User Identity Propagation with Signed, Exchanged JWTs
Why forwarding edge tokens is unsafe, how RFC 8693 token exchange yields audience-scoped internal JWTs, and how to verify, rotate and authorize them.
17 min read
Tag
Tag
Why forwarding edge tokens is unsafe, how RFC 8693 token exchange yields audience-scoped internal JWTs, and how to verify, rotate and authorize them.
17 min read