US 12,445,445 B1
Resource protection for a microservice-based application
Hui Li, Shanghai (CN)
Assigned to SAP SE, Walldorf (DE)
Filed by SAP SE, Walldorf (DE)
Filed on Mar. 26, 2024, as Appl. No. 18/616,692.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/10 (2013.01) [H04L 63/0807 (2013.01)] 18 Claims
OG exemplary drawing
 
1. A system comprising:
a data source;
a first microservice of a microservice-based application;
a gateway to:
receive a first request to the microservice-based application and a security token;
determine a tenant identifier and a user identifier based on the security token;
store the tenant identifier and the user identifier in the data source in association with a first request identifier of the first request; and
transmit the first request, the security token and the first request identifier to the first microservice,
wherein the first microservice is to:
receive the first request for the first microservice to access first data, the security token and the first request identifier;
execute an authentication protocol to authenticate the first request based, at least in part, on the first token; and
while processing the first request:
determine to access the first data of a first user of a first tenant in response to authenticating the first request;
query the data source for the tenant identifier and the user identifier associated with the first request identifier;
determine that the first tenant is associated with the tenant identifier and the first user is associated with the user identifier; and
in response to the determination that the first tenant is associated with the tenant identifier and the first user is associated with the user identifier, the first microservice accesses the first data and performs at least one read operation or edit operation on the first data.