Accessing Rest API deployed on private port from a angular app deployed on public port (Internet facing)

Question

I have a spring boot based REST API deployed on a private Port 7070(embedded tomcat) which is not accessible via internet. Also, I have made a angular app which is deployed on public port 9070 which is accessible via internet.

When i am trying to login into my angular app and calling 7070 it is giving timeout error because it is private port and can't be accessed via public internet.

Is there a way to call my rest API from my angular app or i have to expose rest API on some public port (9070 is this case)?

Answer 1

Yes, you need to expose it.

The angular (javascript) application will run on the client's browser - therefore, it can only communicate with the backend through the internet.

There are several security improvements, which can make this communication more secure, just a few of them:

• Blocking cross-origin requests
• Using HTTPS
• Using JWT webtoken authentication solutions
• Utilizing a proxy server, which tunnels requests to the server

This last one is actually the closes thing you can do to shield the backend REST endpoint from the internet. This way, you can setup your angular application, to communicate with the Proxy Server instead of the Backend Server, and the Proxy Server will redirect communication - but you still need to expose at least one port to the public internet.