Spring Cloud Data Flow Authorization only configuration

Question

We have a requirement where we need to enable only Authorization in Spring Cloud Dataflow server. The authetication will be done from an internal tool. Have tried with the authorization configuration alone leaving out the authentication configuration. But the endpoints are accessible even without an header with an authorization token. Please help with the configurations for enabling authorization only with SCDF server.

Dataflow Server Version: 2.3.0.RELEASE

Answer 1

Spring Cloud Data Flow support Oauth2/OIDC spec-compliant identity providers. Don't know what your "internal tool" is, and whether or not it is a compliant system.

Either way, you could use the security docs from the ref. guide as to compare configuration options; we have a few samples in the sandbox repo (samples: uaa & keycloack), which you can use also as a reference.