And on top of all of that, it makes development and testing harder as you either have to mock the authentication or simulate a real user log on.īut it doesn’t have to be hard: If you use the right backing services ( XSUAA), you won’t have to deal with the authentication. There’s a lot of boring stuff you need to know, you see little to no “real” process in your app even when you spend a fair amount of time on it.
Everyone agrees it’s necessary, but no one really likes to do it. To most developers, web security is a rather unpopular topic. You also won’t have to intercept and expose JWT (pronounced “jot”) tokens from the approuter any longer. This simplifies API testing as you’ll no longer need to redirect incoming traffic via the approuter. In this post, I will show a trick which you can use to fetch JSON Web Tokens from the User Account and Authentication service with Postman.
0 kommentar(er)
