Secure calls between applications

A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

• receiving, at an authentication application and from a first application, a security configuration file that is a JavaScript Object Notation (JSON) file, wherein the security configuration file includes an authority object, wherein the authority object is a JSON object which indicates that the first application authorizes a second application to trigger jobs at the first application, and wherein the second application provides shared services to a plurality of applications including the first application;
• receiving, at the authentication application, a query from the second application and in response sending the authority object to the second application;
• receiving, at the authentication application and from the second application, a request for a token, the request including the authority object, wherein the request is separate from the query;
• and
• sending, by the authentication application, a token including the authority object to the second application, wherein the token is a JSON web token (JWT), wherein the second application sends the token to the first application when the second application triggers jobs at the first application;
• and wherein the first application validates the authority object in the token received from the second application when the second application triggers jobs at the first application.

A computer-implemented system, comprising:

• a computer memory;
• and
• a hardware processor interoperably coupled with the computer memory and configured to perform operations comprising:
• receiving, at an authentication application and from a first application, a security configuration file that is a JavaScript Object Notation (JSON) file, wherein the security configuration file includes an authority object, wherein the authority object is a JSON object which indicates that the first application authorizes a second application to trigger jobs at the first application, and wherein the second application provides shared services to a plurality of applications including the first application;
• receiving, at the authentication application, a query from the second application and in response sending the authority object to the second application;
• receiving, at the authentication application and from the second application, a request for a token, the request including the authority object, wherein the request is separate from the query;
• and
• sending, by the authentication application, a token including the authority object to the second application, wherein the token is a JSON web token (JWT), wherein the second application sends the token to the first application when the second application triggers jobs at the first application;
• and wherein the first application validates the authority object in the token received from the second application when the second application triggers jobs at the first application.