title: Authentication and authorization as a central MicroService ASP.NET
body: <p>I am planning to change the ASP.NET Web API 2.0 which includes Authentication and Authorization and all the services into Microservices architecture.</p>
  
  <p>My Question if I create a central microservice to handle authentication and authorization. How do I authorize the users sending the request with their tokens to other services?</p>
  
  <p>To elaborate the question:</p>
  
  <p>Let'say I have three microservices.
  1 ) ASP NET framework handling authentication and authorization, Which will authenticate a user and sends a token.
  2 ) Orders service, Which will receive the requests with the token in their headers. (ASP NET core)
  3 ) Accounting service, which will receive the requests with the token in their headers. (ASP NET core)</p>
  
  <p>How do we authorize the users when they call service 2 or 3?
  And Is this an ideal approach?</p>