A generic performance-centric design of authentication and authorization within a microservice architecture
Other Title(s)
تصميم عام متمحور حول الأداء للمصادقة و منح الصلاحيات في المعمارية المعتمدة على الخدمات المصغرة
Dissertant
Thesis advisor
University
Isra University
Faculty
Faculty of Information Technology
Department
Department Software Engineering
University Country
Jordan
Degree
Master
Degree Date
2022
English Abstract
Appealing provided functionalities by a system may be frustrating to users if quality attributes are neglected.
As an example, a microservice-based system may have great characteristics but suffers from security and performance problems which are considered very important quality criteria for users.
Security and performance are contradictory nonfunctional requirements, so a reasonable trade-off must be applied to fulfill both.
One way to enforce an appropriate balance between them is the selection of the correct architectural design decisions.
In this research, two microservice-based architectural designs with integrated authentication and authorization features are proposed based on best practices as well as tests that were conducted for performance which are, specifically, single-user performance tests.
In order to suggest these two designs, the literature was searched first for contributions from researchers and practitioners in the field to be built on top of them.
Then, a series of experimental phases were followed.
The experimental phases of the research included implementing the first microservice architecture and analyzing the performance level, in terms of response time, for its authentication and role-based authorization features using both the Structured Query Language (SQL) and non SQL (NoSQL) database technologies.
After that, implementing the second microservice architecture, which reflects organizational structures, and making an identical analysis for its permission-based authorization characteristic and for the relocation procedure of users within organizational trees.
And finally, documenting the obtained results, analyzing them deeply, and make an interpretation, and then, transforming them into architectural design decisions.
The conducted tests on the two microservice architectures were concentrated, essentially, on specifying the most suitable database technology, i.e., SQL or NoSQL, to accompany their authentication and authorization features’ microservices.
The results of these tests encouraged employing NoSQL databases with small microservice-based systems and SQL ones with medium to large ones in order to perform password-based authentication.
But, indicated that there is no difference between them in the role-based authorization process.
In addition, within the context of organizational structures, they showed that using the SQL technology provides a better performance level in completing the permission-based authorization procedure as well as the relocation action of employees.
Main Subjects
Information Technology and Computer Science
No. of Pages
99
Table of Contents
Table of contents.
Abstract.
Abstract in Arabic.
Chapter One : Introduction.
Chapter Two : Background .
Chapter Three : Literature review.
Chapter Four : Research methodology.
Chapter Five : Development technologies and design patterns.
Chapter Six : Authentication and role-based authorization.
Chapter Seven : Managing permissions.
Chapter Eight : Results.
Chapter Nine : Discussion of results.
Chapter Ten : Conclusions and recommendations for future work.
References.
American Psychological Association (APA)
al-Wadi, Randah Ahmad. (2022). A generic performance-centric design of authentication and authorization within a microservice architecture. (Master's theses Theses and Dissertations Master). Isra University, Jordan
https://search.emarefa.net/detail/BIM-1414477
Modern Language Association (MLA)
al-Wadi, Randah Ahmad. A generic performance-centric design of authentication and authorization within a microservice architecture. (Master's theses Theses and Dissertations Master). Isra University. (2022).
https://search.emarefa.net/detail/BIM-1414477
American Medical Association (AMA)
al-Wadi, Randah Ahmad. (2022). A generic performance-centric design of authentication and authorization within a microservice architecture. (Master's theses Theses and Dissertations Master). Isra University, Jordan
https://search.emarefa.net/detail/BIM-1414477
Language
English
Data Type
Arab Theses
Record ID
BIM-1414477
