julianov's avatar

How must a laravel servers works with OpenID Connect server and third-party webservices

There is a SPA client that consumes the API from a "laravel" server. This backend server stores user data, but some data is in other web services, whose access to that data is mediated by an OpenID Connect server. The "laravel" server must authenticate with the OpenID connect server, which will return a token to query the other webservices.

The question is as follows:

When the SPA client needs information that is present in a web service, should this request be made to the "laravel" server and this request the webservices (with the token that the OpenID connect provided) and then return to the client the response of the web services? Or the client directly requests the web services without going through the "laravel" server (the client requests because when the laravel server was authenticated with the OpenID connect, the laravel server sends the client the token?

What is the best alternative?

0 likes
0 replies

Please or to participate in this conversation.