3 ms·

I like it. One simplification might be just to pass 2 tokens: UA as is and A own token. Service B then uses A token for authentication, but UA token for author

I like it. One simplification might be just to pass 2 tokens: UA as is and A own token. Service B then uses A token for authentication, but UA token for authorization.

withinboredom 6y ago
You could also have A just sign the token for the same effect.