Докладчик
Описание
Contemporary content management systems (CMS) expose administrative, editorial, publication, and analytical capabilities to users and client applications with different responsibilities and levels of trust. In a microservice environment, consistent identity and access management becomes more complex because services are independently deployed, own separate data, and communicate through multiple protocols. This study presents the integration of Duende IdentityServer within a .NET-based CMS prototype which adopts a microservice architecture. The proposed design combines OpenID Connect and OAuth 2.0 with centralized management of users, clients, roles, permissions, and security tokens. JSON Web Tokens are validated at the API Gateway and participating service boundaries, while claims- and policy-based authorization protects schema administration, content authoring, editorial review, publication, and reporting operations. The Authorization Code flow with Proof Key for Code Exchange supports interactive clients, whereas the Client Credentials grant enables machine-to-machine access independently of user identity. This approach distinguishes centralized authentication from the enforcement of domain-specific authorization within individual services.
Ключови думи
Content management systems (CMS), identity and access management, IdentityServer, microservices, OpenID Connect, OAuth 2.0, JSON Web Tokens (JWT), claims-based authorization