System, method and computer-accessible medium for resource centric authorization in multi partner ecosystem
An exemplary system, method and computer accessible medium can include receiving an authorization token related to a customer(s), determining a client identification (ID) associated with the customer(s) based on the authorization token, and determining access to a microservices(s) based on the client ID. An application for a loan(s) from the customer (s) can be received based on the client ID and the loan(s) can be associated with an application ID(s). A further authorization token related to a further customer(s) can be received, a further client ID can be determined based on the further authorization token, a determination can be made as to whether the further client ID has access to the application, and access to the application can be granted to the further customer(s) if the further client ID is determined to have access to the application.
1. A non-transitory computer-accessible medium having stored thereon computer-executable instructions, wherein, when a computer arrangement executes the instructions, the computer arrangement is configured to perform procedures comprising:
receiving, from an authorization server, an authorization token related to at least one customer, wherein the authorization token is associated with a request by at least one customer to access at least one microservice;
determining, using a validation server, a client identification (ID) associated with the at least one customer based on the authorization token, wherein the determining further comprises determining that the at least one customer is entitled to access the at least one microservice;
modifying an application programming interface (API) header associated with the request to include the client ID;
sending the API header, which includes the client ID, to the at least one microservice; and
determining access to at least one resource accessible by at least one microservice based on the client ID and using a lookup table accessible by the at least one microservice.
2. The non-transitory computer-accessible medium of claim 1 , wherein the at least one resource includes an application for at least one loan, and wherein the computer arrangement is further configured to:
receive the application for the at least one loan from the at least one customer based on the client ID; and
associate the at least one loan with at least one application ID and the client ID.
3. The non-transitory computer-accessible medium of claim 2 , wherein the computer arrangement is further configured to:
receive, from the authorization server, a further authorization token related to at least one further customer, wherein the further authorization token is associated with a further request by at the least one further customer to access the at least one microservice;
determine, using the validation server, a further client ID associated with the at least one further customer based on the further authorization token, wherein the determining further comprises determining that the at least one further customer is entitled to access the at least one microservice;
modify a further API header associated with the further request to include the further client ID;
send the further API header, which includes the further client ID, to the at least one micro service;
determine if the further client ID has access to the application based on the further client ID; and
grant access to the application to the at least one further customer if the further client ID is determined to have access to the application.
4. The non-transitory computer-accessible medium of claim 3 , wherein
the computer arrangement is further configured to determine if the further client ID has access to the application based on the lookup table.
5. The non-transitory computer-accessible medium of claim 4 , wherein the lookup table includes (i) a plurality of rows associated with a plurality of customers including the at least one customer and (ii) a plurality of columns with further resources available to each of the customers.
6. The non-transitory computer-accessible medium of claim 5 , wherein the further resources include (i) creating an application, (ii) revising the application or (iii) checking a status of the application.
7. The non-transitory computer-accessible medium of claim 1 , wherein the authorization server is an open authorization server.
8. The non-transitory computer-accessible medium of claim 1 , wherein the at least one customer is an automobile dealer or a money lender.
9. The non-transitory computer-accessible medium of claim 1 , wherein the at least one microservice includes at least one of (i) an applications microservice, (ii) an offers microservice, or (iii) a vehicle pricing microservice.
10. A non-transitory computer-accessible medium having stored thereon computer-executable instructions, wherein, when a computer arrangement executes the instructions, the computer arrangement is configured to perform procedures comprising:
receiving, from an authorization server, an authorization token related to at least one customer, wherein the authorization token is associated with a request by at least one customer to access an application microservice;
receiving an application for an automobile loan related to the at least one customer;
determining, using a validation server, a client identification (ID) associated with the at least one customer based on the authorization token, wherein the determining further comprises determining that the at least one customer is entitled to access the application microservice
modifying an application programming interface (API) header associated with the request to include the client ID;
sending the API header, which includes the client ID, to the application microservice;
determining access to at least one resource accessible by the application microservice based on the client ID and using a lookup table accessible by the application microservice;
providing the application to the application microservice;
receiving a request for access to the application from at least one further customer;
determining if the at least one further customer has access to the application based on a further client ID associated with the at least one further customer; and
granting access to the application at the application microservice to the at least one further customer based on the further client ID.
11. The non-transitory computer-accessible medium of claim 10 , wherein the computer arrangement is further configured to receive from the authorization server, a further authorization token related to the at least one further customer and determine the further client ID, using the validation server, based on the further authorization token.
12. The non-transitory computer-accessible medium of claim 10 , wherein the lookup table includes (i) a plurality of rows associated with a plurality of customers including the at least one customer and (ii) a plurality of columns with further resources available to each of the customers.
13. The non-transitory computer-accessible medium of claim 12 , wherein the further resources include (i) creating an application, (ii) revising the application or (iii) checking a status of the application.
14. The non-transitory computer-accessible medium of claim 10 , wherein the authorization server is an open authorization server.
15. The non-transitory computer-accessible medium of claim 10 , wherein the computer arrangement is further configured to call the application microservice using the API header.
16. The non-transitory computer-accessible medium of claim 10 , wherein the at least one customer is an automobile dealer or a money lender.
17. The non-transitory computer-accessible medium of claim 10 , wherein the computer arrangement is configured to determine if the at least one further customer has access to the application by determining if an entry in a lookup table includes information regarding the at least one further customer.
18. A non-transitory computer-accessible medium having stored thereon computer-executable instructions, wherein, when a computer arrangement executes the instructions, the computer arrangement is configured to perform procedures comprising:
receiving an authentication request at an open authorization server from a client;
generating a token based on the authentication request;
providing the token to an application program interface (API), wherein the token is associated with a request by at least one customer to access a particular resource accessible by at least one microservice;
validating the access token at the API using a validation server;
obtaining a client identification (ID) based on the validation of the access token;
modifying an API header associated with the request to include the client ID;
sending the API header, which includes the client ID, to the at least one microservice; and
determining if the client has access to the particular resource at the at least one in microservice based on an entry in a lookup table associated with the client ID that is accessible by the at least one microservice.