Providing service tier information when validating API requests
In various embodiments, one or more non-transitory computer-readable media storing program instructions that, when executed by one or more processors, cause the one or more processors to perform a method comprising receiving, from an API server, a request to access a service, the request including an API authorization identifier; validating the API authorization identifier to generate a validation result; determining a service tier of the service based on the request; and transmitting, to the API server, a response including the validation result and an indicator of the service tier based on the request.
1. One or more non-transitory computer-readable media storing program instructions that, when executed by one or more processors of an authorization server, cause the one or more processors to perform a method comprising:
receiving, from an application programming interface (API) server, a request to access a service, the request including an API authorization identifier;
validating the API authorization identifier to generate a validation result;
determining a service tier of the service based on the request; and
transmitting, to the API server, a response to the request including the validation result and an indicator of the service tier based on the request.
2. The one or more non-transitory computer-readable media of claim 1 , wherein the API authorization identifier includes at least one of a key, a token, or a certificate.
3. The one or more non-transitory computer-readable media of claim 1 , wherein the indicator of the service tier indicates a level of performance to be used by the API server in performing the service.
4. The one or more non-transitory computer-readable media of claim 1 , wherein the service tier is determined based on identifying information of a user or a client device.
5. The one or more non-transitory computer-readable media of claim 1 , wherein the service tier is determined based on a subscription of a user or a client device that includes the service provided by the API server.
6. The one or more non-transitory computer-readable media of claim 5 , wherein the service tier is determined based on whether the user has a paid subscription or a free subscription to the service provided by the API server.
7. The one or more non-transitory computer-readable media of claim 1 , wherein the service tier is determined based on a subscription list that associates service tiers with subscribers.
8. The one or more non-transitory computer-readable media of claim 1 , further comprising determining a default service tier in response to a failure to determine a service tier based on the request.
9. The one or more non-transitory computer-readable media of claim 1 , wherein the indicator of the service tier includes a subscription associated with at least one of a user associated with the request or a client device associated with the request.
10. The one or more non-transitory computer-readable media of claim 1 , wherein the service tier indicates a performance of the service by the API server based on one or more of,
an availability of an operation of the service based on the service tier,
a level of detail of an operation of the service based on the service tier, or
a resource limit on resources to be used when performing an operation of the service based on the service tier.
11. The one or more non-transitory computer-readable media of claim 1 , wherein the service tier is selected from a plurality of service tiers, wherein each of the plurality of service tiers is associated with a different level of service in the API server.
12. A computer-implemented method of validating requests to access services, comprising:
receiving, in an authorization server and from an application programming interface (API) server, a request to access a service, the request including an API authorization identifier;
validating the API authorization identifier to generate a validation result;
determining a service tier of the service based on the request; and
transmitting, to the API server, a response to the request including the validation result and an indicator of the service tier based on the request.
13. The computer-implemented method of claim 12 , wherein the API authorization identifier includes at least one of a key, a token, or a certificate.
14. The computer-implemented method of claim 12 , wherein the indicator of the service tier indicates a level of performance to be used by the API server in performing the service.
15. The computer-implemented method of claim 12 , wherein the service tier is determined based on identifying information of a user or a client device.
16. The computer-implemented method of claim 12 , wherein the service tier is determined based on a subscription of a user or a client device that includes the service provided by the API server.
17. The computer-implemented method of claim 16 , wherein the service tier is determined based on whether the user has a paid subscription or a free subscription to the service provided by the API server.
18. The computer-implemented method of claim 12 , wherein the service tier is determined based on a subscription list that associates service tiers with subscribers.
19. The computer-implemented method of claim 12 , further comprising determining a default service tier in response to a failure to determine a service tier based on the request.
20. The computer-implemented method of claim 12 , wherein the indicator of the service tier includes a subscription associated with at least one of a user associated with the request or a client device associated with the request.
21. The computer-implemented method of claim 12 , wherein the service tier indicates a performance of the service by the API server based on one or more of,
an availability of an operation of the service based on the service tier,
a level of detail of an operation of the service based on the service tier, or
a resource limit on resources to be used when performing an operation of the service based on the service tier.
22. The computer-implemented method of claim 12 , wherein the service tier is selected from a plurality of service tiers, wherein each of the plurality of service tiers is associated with a different level of service in the API server.
23. An authorization server, comprising:
a memory that stores instructions, and
a processor that is coupled to the memory and, when executing the instructions, is configured to:
receive, from an application programming interface (API) server, a request to access a service, the request including an API authorization identifier;
validate the API authorization identifier to generate a validation result;
determine a service tier of the service based on the request; and
transmit, to the API server, a response to the request including the validation result and an indicator of the service tier based on the request.
24. The authorization server of claim 23 , wherein the API authorization identifier includes at least one of a key, a token, or a certificate.
25. The authorization server of claim 23 , wherein the indicator of the service tier indicates a level of performance to be used by the API server in performing the service.
26. The authorization server of claim 23 , wherein the service tier is determined based on identifying information of a user or a client device.
27. The authorization server of claim 23 , wherein the service tier is determined based on a subscription of a user or a client device that includes the service provided by the API server.
28. The authorization server of claim 27 , wherein the service tier is determined based on whether the user has a paid subscription or a free subscription to the service provided by the API server.
29. The authorization server of claim 23 , wherein the service tier is determined based on a subscription list that associates service tiers with subscribers.
30. The authorization server of claim 23 , wherein the processor, when executing the instructions, is further configured to determine a default service tier in response to a failure to determine a service tier based on the request.
31. The authorization server of claim 23 , wherein the indicator of the service tier includes a subscription associated with at least one of a user associated with the request or a client device associated with the request.
32. The authorization server of claim 23 , wherein the service tier indicates a performance of the service by the API server based on one or more of,
an availability of an operation of the service based on the service tier,
a level of detail of an operation of the service based on the service tier, or
a resource limit on resources to be used when performing an operation of the service based on the service tier.
33. The authorization server of claim 23 , wherein the service tier is selected from a plurality of service tiers, wherein each of the plurality of service tiers is associated with a different level of service in the API server.