Secure Microservices Using JWT With Ocelot in .NET

[@CodeMaze]

Thank you all for watching and for your support. ►► If you want to master Web API development using best practices, check out our Web API book: bit.ly/3x75ZMM ►► Also, to build great full-stack apps with Blazor, check out our course: bit.ly/3Pw3Y33

[@TheMostafa5000]

That was awesome, Thanks.

[@CodeMaze]

You're welcome! Thank you for watching the video.

[@abhayashis]

Awesome video 👍

[@CodeMaze]

Thank you! Cheers!

[@lexNwimue]

Great stuff as usual. Just one question though as I'm new to .NET and Ocelot. So I have to manually add each endpoint I create to the Ocelot gateway routes? Which means if I have a huge project (which a lot of microservices can be) with hundreds of endpoint, they'd all be included in this Ocelot routes array?

[@CodeMaze]

Hi. Thank you. Yes, you need to configure all the routes. But to avoid having one large file, you can split configuration into multiple files and merge them. The Ocelot documentation has more info on that.

[@souhailelghiouane-m1v]

your are the best

[@CodeMaze]

Thank you. I'm glad you like the video.

[@omarmokhtar3353]

but any authorized user can call the API directly without the gateway and get the result if even it doesn't have the required scope or role right ?

[@CodeMaze]

Hi. First of all, all the clients/users shouldn't be aware of the endpoint routes for any of the microservices. But, of course, we shouldn't only rely on that. You can and should use the authorize attribute for each endpoint just in case.

[@omarmokhtar3353]

@@CodeMaze 🙏 thanks

[@harshadgohil408]

Where is the download code?

[@CodeMaze]

The source code is part of the patreon support program, please check the description section.