Search code examples
javajhipsternetflix-zuul

Jhipster access control policy not working

I'm trying to disable access to all microservice API in one of my gateways. This is because in this gateway I only want to publish the angular app.

I'm trying this, but it don't seems to work:

https://jhipster.github.io/microservices-architecture/#acl

Debugging the gateway, I see that de AccessControlFilter.java is working and trying to return a FORBIDDEN HttpStatus in the run() method, but I get access to the api, and a 200 code response.

Solution

  • Personally, rather than disabling the zuul proxy entirely, I would change the zuul properties to setup routes manually :

    zuul:    
  ignoredServices: '*'   
  routes:
    app1: 
      path: /app1/** 
      serviceId: app1

    Add only the routes that you need.