Delegated resource authorization for replicated applications

A network device, comprising:

• a processing unit configured to:
• assign a single application identifier (ID) and a single application secret value (SV) to a customer application, wherein multiple replicated instances of the customer application include a first instance of the customer application assigned the single application ID and the single application SV and installed in a first machine of a machine cluster of customer premises equipment (CPE), and a second instance of the customer application assigned the single application ID and the single application SV and installed in a second machine of the machine cluster of the CPE;
• and
• a communication interface connected to a network and configured to:
• receive a first resource authorization request from the first instance of the customer application via a wireline network connection to the first machine, and
• receive a second resource authorization request from the second instance of the customer application via a wireless network connection to the second machine;
• wherein the processing unit is further configured to:
• generate, responsive to the first resource authorization request, a first token using a first network address associated with the first machine, the single application ID and the single application SV,
• return, via the communication interface to the first instance of the customer application, the generated first token for use in requesting access to a resource server,
• generate, responsive to the second resource authorization request, a second token using a second network address associated with the second machine, the single application ID and the single application SV, and
• return, via the communication interface to the second instance of the customer application, the generated second token for use in requesting access to the resource server.

A non-transitory storage medium storing instructions executable by a computational device, wherein the instructions comprise instructions to cause the computational device to:

• assign a single application identifier (ID) and a single application secret value (SV) to a customer application, wherein multiple replicated instances of the customer application include a first instance of the customer application assigned the single application ID and the single application SV and installed in a first machine of a machine cluster of customer premises equipment (CPE), and a second instance of the customer application assigned the single application ID and the single application SV and installed in a second machine of the machine cluster of the CPE;
• receive a first resource authorization request from the first instance of the customer application via a wireless or a wireline network connection to the first machine;
• receive a second resource authorization request from the second instance of the customer application via a wireless or a wireline network connection to the second machine;
• generate, responsive to the first resource authorization request, a first token using a first network address associated with the first machine, the single application ID and the single application SV;
• return, to the first instance of the customer application, the generated first token for use in requesting access to a resource server;
• generate, responsive to the second resource authorization request, a second token using a second network address associated with the second machine, the single application ID and the single application SV;
• and
• return, to the second instance of the customer application, the generated second token for use in requesting access to the resource server.