Within every application, whether monolith or microservice, authentication is required, for example for databases. These authentications are usually in the form of a username and password pair. But is that all the secret information? And what about the security of this data? Is there a process that exchanges the authentication resources?
Other data is often overlooked, but it is also necessary for the secure operation of an application, e.g. key pairs for SSL encryption.
This talk will use the example of a distributed Spring Boot application to show how authentication sources can be handled fully automatically. In this way, this information can become more short-lived and thus increase the security of the system.