Should JWT be a separate auth micro-service and not sit with the backend business logic?

Question

I was trying to build an application using JWT and SpringBoot, also using API for authorization from business. Is it a best practice for authentication? Can anyone help me with this?

Answer 1

Basically, you can use an API gateway for authentication and authorization requests. These requests are passing through the API gateway, in which they got validate and can access only if validate the token.

I hope this will help.

Want to become a Java Expert? Join Java Certification now!!