Multitenancy gaming services platform

1. method for providing multitenancy gaming platform services, comprising:

generating, by a first server computer, a new application identifier for an application for accessing a plurality of multitenancy gaming platform services;

storing, by the first server computer, the new application identifier and associating the new application identifier with the application;

receiving, by the first server computer, a request for a new token from a client device running the application, the request including a user identifier;

generating, by the first server computer, the new token including the user identifier;

sending, by the first server computer, the new token to the client device running the application;

receiving, by the first server computer from the client device running the application, a request for a service to perform an operation for the application, the request including the new token, data related to the application, and a target user identifier associated with user data upon which the operation should apply the data related to the application;

decoding, by the first server computer, the token to determine the application identifier and the user identifier;

authenticating, by the first server computer, the application identifier and user identifier;

determining, by the first server computer, which service of the plurality of multitenancy gaming platform services is requested;

sending, by the first server computer, the data related to the application to a second server computer responsible for the service, wherein the operation is authorized by the second server computer based on the user identifier and target user identifier, and the operation is performed by the service; and

receiving, by the first server computer, a response from the second server computer responsible for the service, indicating a status of the operation.

2. The method of claim 1 , wherein before generating the new application identifier, the method comprises:

receiving a request from a client device for the new application identifier.

3. The method of claim 1 , wherein

the new token expires after a predetermined amount of time.

4. The method of claim 1 wherein the request for the service further includes a Check and Set (CAS) value, and wherein the method further comprises:

authenticating the CAS value against a stored CAS value; and

sending the data related to the application to the second server computer responsible for the service if the CAS value matches the stored CAS value.

5. The method of claim 4 , further comprising:

receiving an updated CAS value from the server computer responsible for the service;

replacing the stored CAS value with the updated CAS value; and

sending the updated CAS value to a client device.

6. The method of claim 1 , wherein authorizing the operation based on the user identifier and target user identifier comprises determining that the user identifier matches the target user identifier.

7. The method of claim 1 , further comprising:

determining that the operation associated with the service requires that the user identifier and target user identifier match; and

authorizing the user identifier if it matches the target user identifier.

8. The method of claim 1 , further comprising:

determining that the operation associated with the service does not require that the user identifier and target user identifier match; and

authorizing the user identifier even if the user identifier does not match the target user identifier.

9. The method of claim 1 , wherein the target user identifier is the user identifier for the operation to act upon.

10. The method of claim 1 , wherein the service includes one or more of a group comprising: storage of a game state, creating a leaderboard, updating a user score, and accessing a leaderboard.

11. A server computer comprising:

one or more processors; and

a computer readable medium coupled with the one or more processors, the computer readable medium comprising instructions stored thereon that are executable by the one or more processors to cause a computing device to perform operations comprising:

generating a new application identifier for an application for accessing a plurality of multitenancy gaming platform services;

storing the new application identifier and associating the new application identifier with the application;

receiving a request for a new token from a client device running the application, the request including a user identifier;

generating the new token including the user identifier;

sending the new token to the client device running the application;

receiving, by the first server computer from the client device running the application, a request for a service to perform an operation for the application, the request including the new token, data related to the application, and a target user identifier associated with user data upon which the operation should apply the data related to the application;

decoding the token to determine the application identifier and the user identifier;

authenticating the application identifier and user identifier;

determining which service of the plurality of multitenancy gaming platform services is requested;

sending the data related to the application to a second server computer responsible for the service, wherein the operation is authorized by the second server computer based on the user identifier and target user identifier, and the operation is performed by the service; and

receiving a response from the second server computer responsible for the service, indicating a status of the operation.

12. The server computer of claim 11 , wherein before generating the new application identifier, the operations comprise:

receiving a request from a client device for the new application identifier.

13. The server computer of claim 11 , wherein

the new token expires after a predetermined amount of time.

14. The server computer of claim 11 , wherein the request for the service further includes a Check and Set (CAS) value, and wherein the operations further comprise:

authenticating the CAS value against a stored CAS value; and

sending the data related to the application to the second server computer responsible for the service if the CAS value matches the stored CAS value.

15. The server computer of claim 14 , wherein the operations further comprise:

receiving an updated CAS value from the server computer responsible for the service;

replacing the stored CAS value with the updated CAS value; and

sending the updated CAS value to a client device.

16. The server computer of claim 11 , wherein authorizing the operation based on the user identifier and target user identifier comprises determining that the user identifier matches the target user identifier.

17. The server computer of claim 11 , wherein the operations further comprise:

determining that the operation associated with the service requires that the user identifier and target user identifier match; and

authorizing the user identifier if it matches the target user identifier.

18. The server computer of claim 11 , wherein the operations further comprise:

determining that the operation associated with the service does not require that the user identifier and target user identifier match; and

authorizing the user identifier even if the user identifier does not match the target user identifier.

19. The server computer of claim 11 , wherein the target user identifier is the user identifier for the operation to act upon.

20. A non-transitory computer readable medium comprising instructions stored thereon that are executable by one or more processors to cause a computing device to perform operations comprising:

generating a new application identifier for an application for accessing plurality of multitenancy gaming platform services;

storing the new application identifier and associating the new application identifier with the application;

receiving a request for a new token from a client device running the application, the request including a user identifier;

generating the new token including the user identifier;

sending the new token to the client device running the application;

receiving, by the first server computer from the client device running the application, a request for a service to perform an operation for the application, the request including the new token, data related to the application, and a target user identifier associated with user data upon which the operation should apply the data related to the application;

decoding the token to determine the application identifier and the user identifier;

authenticating the application identifier and user identifier;

determining which service of the plurality of multitenancy gaming platform services is requested;

sending the data related to the application to a second server computer responsible for the service, wherein the operation is authorized by the second server computer based on the user identifier and target user identifier, and the operation is performed by the service; and

receiving a response from the second server computer responsible for the service, indicating a status of the operation.