Decentralized authorization with zero-trust

An authorization server, comprising:

• a processor configured to authorize an authorization request;
• and
• a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising:
• receiving, from a requesting device, a request to authorize based on decentralized enforcement of a policy, the requesting device to perform, via a service, an operation on a resource;
• determining that the request comprises a signed resource comprising resource data indicative of information relied on to evaluate the policy;
• determining that the entity is trusted;
• and
• in response to the determining that the entity is trusted, using the resource data to evaluate the policy.

A method, comprising:

• receiving, by a device comprising a processor, a request, from a requesting device, to authorize the requesting device to perform, via a service, an operation on a resource;
• determining, by the device, that the request comprises request data indicative of one of:
• a reference address indicative of a network address of the resource, from which resource data indicative of information on which to rely to evaluate a variable authorization policy, is retrieved, or
• a signed resource that comprises the resource data indicative of the information on which to rely to evaluate the variable authorization policy;
• performing, by the device, a trust verification procedure that indicates the request data originates from a trusted source;
• and
• in response to the trust verification procedure indicating that the request data originates from the trusted source, evaluation the variable authorization policy based on the resource data.