Ideally, the requester will have a token in the request.
If you want Zuul to add an authentication token, you can create a ZuulFilter and use:
context.addZuulRequestHeader("Authorization", "base64encodedTokenHere");
Doing this will give open access to services, which may be unreasonable.
source share