Systems and methods for application security improvements

A system for securely receiving a request comprising:

• a memory storing instructions;
• and
• a processor configured to execute instructions to perform operations to:
• receive an application request from a micro application, the micro application configured to:
• receive a client request from a client, the client request including a request header that includes a session cookie, the session cookie including a session identifier (“ID”) and a cookie token selected from one or more of a JavaScript Object Notation (“JSON”) web request token, a cross site request forgery request (“CSRF”) token, or a micro application outer request forgery (“MORF”) token;
• transform the client request into the application request;
• and
• transmit the application request to the processor;
• transmit the application request to a reverse proxy, the reverse proxy configured to:
• receive the application request from the processor;
• and
• transmit the application request to a pod based on a set of predefined rules, wherein the pod includes a validator and the predefined rules include maximum traffic volume to the pod, availability of the pod, and required response time of the pod, such that the pod is one that has not reached its maximum traffic, is available, and has an adequate response time,
• the validator configured to:
• receive the application request from the reverse proxy;
• extract the session cookie from the request header;
• extract the cookie token from the session cookie;
• locate a session object stored in a session cache, based on the session ID;
• extract a cached token from the session object, wherein the cached token is a same type of token as the cookie token;
• compare the cookie token with the cached token;
• convert the application request into a validated request upon determining the cookie token matches the cached token;
• and
• transmit the validated request to a vertical slice for processing, wherein the vertical slice includes at least one of an outer application program interface (“API”), an inner API, or a system of record.