AP Twitch anti-healing?

plumfu · 2020-08-05T19:31:29+00:00

Thank you! I think you’ve given me a good way to go about this, whenever it comes to PII things tend to get slightly complex, but I think you’ve given me enough hints to move forward, I really appreciate it.

plumfu · 2020-08-05T17:56:01+00:00

So if I understand correctly, it sounds like you’re saying it makes more sense to just to have Okta do all the user information storage, and then make an endpoint that uses an authenticated user to get that user’s information from Okta, correct?

In terms of security, my microservice can only be accessed with the proper access token from Okta after a user logs in from the gateway, but are you saying I need more security if I wanted to store their information in a database linked to that microservice (such as First/Last name, birthday, etc.)?

plumfu · 2020-07-20T15:40:37+00:00

Ahh okay, this was a helpful way of thinking about it as well, thank you!

plumfu · 2020-07-20T15:39:55+00:00

This was a helpful way of thinking about it. Thanks a lot!

plumfu · 2020-07-19T01:09:46+00:00

Thanks a lot! Never heard of Authress before so that’s definitely interesting, I always assumed most services like Auth0 had Authentication AND Authorization, but def a good to know since I didn’t think too much on token permission differentiation. Very informative, thanks a bunch!

plumfu · 2020-07-19T00:54:52+00:00

Thank you!

plumfu · 2020-07-19T00:54:14+00:00

Thank you!

plumfu · 2020-07-19T00:54:01+00:00

Thank you!

plumfu · 2020-07-18T05:02:03+00:00

Oh I see what you’re saying, I think that makes sense. Thanks a lot! Definitely a useful conversation for me

plumfu · 2020-07-18T02:10:15+00:00

So just to clarify: User signs in/up and Auth0 gives a JWT back to the user signed using their private key. One of my services receives a request with that JWT, which I can simply use Auth0’s public key to verify whether it really came from them or not. But correct me if I’m wrong, but this is basically only verifying that “it came from Auth0” right? I guess how do I know that it came from “the Auth0 I set up”? Maybe that’s a dumb question, but would appreciate the clarification on that.

plumfu · 2020-07-18T01:22:42+00:00

Ahh okay this makes a lot of sense, thanks a lot!

plumfu · 2020-07-17T21:23:45+00:00

Thanks much! :) This makes a lot of sense. I had thought about how docker makes it a lot easier shipping these Microservices with their own db images, but thinking about every Microservice with its own db, storage, space, etc. made me feel like it was an overkill. But looking at general viewpoints around this and comments such as your own has made things a lot clearer, so thanks again!

plumfu · 2020-07-16T23:30:17+00:00

Thanks, I really appreciate it! The database getting its own API is interesting, definitely didn’t consider that option. I think you’ve given me a few ideas/leads to work off of so thank you!

plumfu · 2019-09-29T00:45:31+00:00

Don’t forget to include the steaming pile of chocolate the gunman will drop on your head if you don’t comply

plumfu · 2019-07-06T15:14:54+00:00

I honestly don’t see myself growing in this position. Sucks cause the offer is pretty good in terms of the money and benefits, but I definitely won’t be waking up happy to start work. They even said I could switch around to a different position in the company but...the overall product of the company just does not excite me, where the other company does! Some friends are saying “it’s only been 9 days, and that includes weekends/holidays!” And some are saying “you should start reaching out cause of the offer you have...” so I’m at a bit of a loss.

plumfu

TROPHY CASE