AUTHORIZATION IDENTIFIERS WITH EXECUTABLE CODE BLOCKS

1 . One or more non-transitory computer-readable media storing program instructions that, when executed by one or more processors of an authorization server, cause the one or more processors to perform a method comprising:

receiving, from an application programming interface (API) server, an authorization request, the authorization request including an API authorization identifier;

determining whether the API authorization identifier is valid; and

in response to determining that the API authorization identifier is valid:

executing a code block in the API authorization identifier;

adding an output generated by the execution of the code block to a response to the authorization request; and

returning the response to the API server.

2 . The one or more non-transitory computer-readable media of claim 1 , wherein the output generated by the executing of the code block includes business data of a client associated with the API authorization identifier.

3 . The one or more non-transitory computer-readable media of claim 1 , wherein executing the code block comprises executing the code block within a container instance.

4 . The one or more non-transitory computer-readable media of claim 1 , wherein the method further comprises validating the code block before executing the code block.

5 . The one or more non-transitory computer-readable media of claim 4 , wherein the method further comprises in response to the code block failing the validating, adding a code block error to the response to the authorization request.

6 . The one or more non-transitory computer-readable media of claim 4 , wherein validating the code block comprises validating a syntax of the code block.

7 . The one or more non-transitory computer-readable media of claim 4 , wherein validating the code block comprises determining that each function call in the code block is included in a white list of permitted function calls.

8 . The one or more non-transitory computer-readable media of claim 4 , wherein validating the code block comprises determining whether a client associated with the API authorization identifier has exceeded a quota of a number of code blocks that can be executed over a time period.

9 . The one or more non-transitory computer-readable media of claim 1 , wherein the method further comprises in response to the API authorization identifier failing the validating, returning an error to the API server.

10 . The one or more non-transitory computer-readable media of claim 1 , wherein the API authorization identifier is provided by a client requesting access to a service provided by the API server.

11 . The one or more non-transitory computer-readable media of claim 1 , wherein the output generated by the executing of the code block is added to a response returned to a client that provided the API authorization identifier.

12 . A computer-implemented method of processing an authorization request, the computer-implemented method comprising:

receiving, from an application programming interface (API) server, an authorization request, the authorization request including an API authorization identifier;

determining whether the API authorization identifier is valid; and

in response to determining that the API authorization identifier is valid:

executing a code block in the API authorization identifier;

adding an output generated by the execution of the code block to a response to the authorization request; and

returning the response to the API server.

13 . The computer-implemented method of claim 12 , wherein the output generated by the executing of the code block includes business data of a client associated with the API authorization identifier.

14 . The computer-implemented method of claim 12 , wherein executing the code block comprises executing the code block within a container instance.

15 . The computer-implemented method of claim 12 , further comprising validating the code block before executing the code block.

16 . The computer-implemented method of claim 15 , further comprising in response to the code block failing the validating, adding a code block error to the response to the authorization request.

17 . The computer-implemented method of claim 15 , wherein validating the code block comprises validating a syntax of the code block.

18 . The computer-implemented method of claim 15 , wherein validating the code block comprises determining that each function call in the code block is included in a white list of permitted function calls.

19 . The computer-implemented method of claim 15 , wherein validating the code block comprises determining whether a client associated with the API authorization identifier has exceeded a quota of a number of code blocks that can be executed over a time period.

20 . The computer-implemented method of claim 12 , further comprising in response to the API authorization identifier failing the validating, returning an error to the API server.

21 . The computer-implemented method of claim 12 , wherein the API authorization identifier is provided by a client requesting access to a service provided by the API server.

22 . The computer-implemented method of claim 12 , wherein the output generated by the executing of the code block is added to a response returned to a client that provided the API authorization identifier.

23 . A system comprising:

a memory storing instructions; and

one or more processors coupled to the memory and, when executing the instructions, are configured to perform operations comprising:

receiving, from an application programming interface (API) server, an authorization request, the authorization request including an API authorization identifier;

determining whether the API authorization identifier is valid; and

in response to determining that the API authorization identifier is valid:

executing a code block in the API authorization identifier;

adding an output generated by the execution of the code block to a response to the authorization request; and

returning the response to the API server.

24 . The system of claim 23 , wherein the output generated by the executing of the code block includes business data of a client associated with the API authorization identifier.

25 . The system of claim 23 , wherein executing the code block comprises executing the code block within a container instance.

26 . The system of claim 23 , wherein the operations further comprise validating the code block before executing the code block.

27 . The system of claim 26 , wherein the operations further comprise in response to the code block failing the validating, adding a code block error to the response to the authorization request.

28 . The system of claim 26 , wherein validating the code block comprises validating a syntax of the code block.

29 . The system of claim 26 , wherein validating the code block comprises determining that each function call in the code block is included in a white list of permitted function calls.

30 . The system of claim 26 , wherein validating the code block comprises determining whether a client associated with the API authorization identifier has exceeded a quota of a number of code blocks that can be executed over a time period.

31 . The system of claim 23 , wherein the operations further comprise in response to the API authorization identifier failing the validating, returning an error to the API server.

32 . The system of claim 23 , wherein the API authorization identifier is provided by a client requesting access to a service provided by the API server.

33 . The system of claim 23 , wherein the output generated by the executing of the code block is added to a response returned to a client that provided the API authorization identifier.