System architecture for secure highly available microservice applications with decentralized authorization using short-lived tokens for security enforcement in cloud platforms

A method comprising:

• receiving, at a device, an authentication request indicating credentials of a requestor;
• determining, based on the credentials, whether the requestor is authorized;
• responsive to determining that the requestor is authorized, generating a first authentication token;
• sending, to a first service, a first access request that includes the first authentication token;
• sending, to a second service, a second access request that includes the first authentication token;
• responsive to determining that the first authentication token has expired, determining whether the requestor remains authorized based on the credentials;
• and
• responsive to determining that the requestor remains authorized, generating a second authentication token.

A non-transitory computer-readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to:

• receive an authentication request indicating credentials of a requestor;
• determine, based on the credentials, whether the requestor is authorized;
• responsive to a determination that the requestor is authorized, generate a first authentication token;
• send, to a first service, a first access request that includes the first authentication token;
• send, to a second service, a second access request that includes the first authentication token;
• responsive to a determination that the first authentication token has expired, determine whether the requestor remains authorized based on the credentials;
• and
• responsive to a determination that the requestor remains authorized, generate a second authentication token.