https://azuar4e.github.io/en/tags/istio/azuar4eHugo 0.147.8 & FixIt v0.3.21-b2e6f70aenazuar4e@gmail.com (Angel Azuara Eizaguirre)azuar4e@gmail.com (Angel Azuara Eizaguirre)Mon, 08 Jun 2026 20:43:48 +0200https://azuar4e.github.io/en/posts/micros-sec-istio/Mon, 08 Jun 2026 20:43:48 +0200azuar4e@gmail.com (Angel Azuara Eizaguirre)https://azuar4e.github.io/en/posts/micros-sec-istio/Personal Projects<p>Have you ever wondered how to handle user authentication by delegating it to an <em>Identity Provider</em> (IdP), and how to secure communication between your microservices without having to implement that logic yourself? That&rsquo;s exactly what we&rsquo;re going to look at in this article.</p> <p>The motivation for this post comes from the need to address some of the limitations of my <a href="https://azuar4e.github.io/es/posts/tfg/"target="_blank" rel="external nofollow noopener noreferrer">bachelor&rsquo;s thesis</a>. The two main shortcomings were user authentication, which was handled manually by generating a JWT, and the lack of HTTPS in communication between microservices. In this new project we solve both: we delegate authentication to a real IdP, and we secure internal communications with mTLS transparently at the application level.</p>