Tim Deschryver • 9/25/2025

Forwarding authenticated calls to a downstream API using YARP

This technical article details implementing secure service-to-service communication in a Backend for Frontend (BFF) architecture. It covers using YARP (Yet Another Reverse Proxy) to forward authenticated calls from a .NET Aspire BFF to a downstream API by exchanging a user session cookie for an OAuth 2.0 access token, which is then passed in the Authorization header.

0 comments

#authentication #Reverse Proxy #API Gateway