A computer-implemented method for using digitally signed web tokens to securely share sensitive data within microservice components of a cybersecurity event detection and response service, the method comprising:
- identifying, via an application programming interface (API) gateway, an API request that includes an authorization header comprising authentication data;
- assessing, via an authentication service of the API gateway, the authentication data of the API request against a corpus of valid authentication data of the cybersecurity event detection and response service based on the identifying of the API request;
- identifying, via the authentication service of the API gateway, (a) the authentication data as valid authentication data and (b) a target entity that corresponds to the authentication data based on the assessment of the authentication data against the corpus of valid authentication data;
- obtaining, via the authorization service of the API gateway, a set of permissions that the target entity is authorized to perform within the cybersecurity event detection and response service based on searching a corpus of authorization data using an identifier of the target entity as a search parameter;
- generating, at the authorization service of the API gateway, a digitally signed protobuf web token that includes (1) a representation of the target entity and (2) a representation of the set of permissions associated with the target entity based on the obtaining of the set of permissions;
- and
- based on the generation of the digitally signed protobuf web token:
- adapting, via one or more processors, the API request to an adapted API request, wherein the adapted API request includes a header component comprising the digitally signed protobuf web token;
- and
- transmitting, via a network, the adapted API request to a target API-processing service of the cybersecurity event detection and response service that automatically processes or automatically handles the adapted API request.