Check the docs before asking a question: https://docs.abp.io/en/commercial/latest/ Check the samples, to see the basic tasks: https://docs.abp.io/en/commercial/latest/samples/index The exact solution to your question may have been answered before, please use the search on the homepage.
We a developing out solution as seperate modules. I would like to know what is the best method to use to communicate between modules.
Reading up it seems that the best method is to communicate using application services, however this may cause security related issues between modules.
e..g Module B runs a backround service that has to get a list of new events from module A.
Module B does not have a user associated to it. Module A's method to get the list of tasks needs to check if the user making a request to the webapi service has access to the tasks.
IS there a way to check the request is coming from another microservice and not from a user to allow the user to access the items? Will the ABP permission on the application service block the call if the method is called from another microservice?
What is the best way to implement this type of communication between modules without compromising on security
- ABP Framework version: vX.X.X
- UI type: Angular / MVC
- Tiered (MVC) or Identity Server Seperated (Angular): yes / no
- Exception message and stack trace:
- Steps to reproduce the issue:
2 Answer(s)
-
0
Hi,
You can create a special user or client and use these users or clients for authorization. see https://github.com/abpframework/abp/blob/dev/templates/module/aspnet-core/test/MyCompanyName.MyProjectName.HttpApi.Client.ConsoleTestApp/ClientDemoService.cs
-
0
Thank you for the quick response
