Standard Classification: Application Gateway: What is it and how can you ...
summary
A concrete system description: an OWASP reverse proxy called Application Gateway implements session management and federated login using OpenID Connect (plus native GitHub support), built on Java Spring with Spring Cloud Gateway, configured by a single YAML file, and available as Docker and JAR releases. The demo shows Google login, an encrypted session cookie and a forwarded Authorization Bearer JWT the backend can validate. It scales horizontally conceptually but cluster support is not yet released, so production use requires planned workarounds.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 0:38Why Application Gateway
- 3:33Team
- 4:08Microservice Architecture
- 4:33Authentication
- 6:04Application Gateway
- 8:01Advantages and disadvantages
- 10:48Demo
- 11:44How it works
- 13:43Demonstration
- 17:22Design Principles
- 20:01Network Stack
- 20:51Usage Models
- 22:15Github
related talks
46mApplication Gateway Security What Developers Really Need to Know
43mSecuring Apps in the Open-By-Default Cloud
01h 11mSpring Cloud Gateway - Spencer Gibb, Sree Tummidi
36mAdvanced Authentication patterns at the Edge
43mSpring Cloud Gateway: Resilience and Security
47mSpring Cloud Gateway: Resilience, Security, and Observability
46mImplementing Microservices Security Patterns & Protocols with Spring Security
28mAPI Gateway: critical component of your digital architecture