Skip to content

Document securing Eureka replication requests with custom filters#4556

Open
yashdotdev13 wants to merge 1 commit into
spring-cloud:mainfrom
yashdotdev13:docs/eureka-replication-auth
Open

Document securing Eureka replication requests with custom filters#4556
yashdotdev13 wants to merge 1 commit into
spring-cloud:mainfrom
yashdotdev13:docs/eureka-replication-auth

Conversation

@yashdotdev13
Copy link
Copy Markdown

This PR adds documentation for securing Eureka replication requests.

Replication requests between Eureka nodes do not pass through standard
Spring Security filters, so authentication mechanisms like OAuth2 token
injection are not applied by default.

This change documents how to use ReplicationClientAdditionalFilters
to customize replication requests and inject authentication headers.

Fixes #4046

Signed-off-by: 98001yash <yashchauhan.gaya@gmail.com>

For more information on CSRF see the https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/#csrf[Spring Security documentation].

A demo Eureka Server can be found in the Spring Cloud Samples https://github.com/spring-cloud-samples/eureka/tree/Eureka-With-Security-4.x[repo].
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The documentation should be added after this line

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Oauth token cannot be injected to replica requests for Eureka cluster

3 participants