Spring / Spring CredHub Interview questions
List the authentication mechanisms supported by Spring CredHub?
Spring CredHub supports two ways to authenticate to a CredHub server, and auto-configuration picks between them based on which properties are set:
- Mutual TLS — the default on Cloud Foundry. The app and CredHub each present a certificate issued by the platform, and no extra credentials are configured beyond the server URL.
- OAuth2 client credentials via UAA — used when a client ID, secret, and token URI are supplied. Spring CredHub requests an access token from UAA and attaches it as a bearer token on every request.
If no OAuth2 properties are present, Spring CredHub falls back to mutual TLS, since that's the scheme CredHub itself treats as the default on Cloud Foundry.
Which two authentication mechanisms does Spring CredHub support?
Which mechanism does auto-configuration fall back to by default?
More Related questions...
