How to design Rest correctly?

Question

RESTful API

Good afternoon!
It is necessary to remove Authentication from the main server in order to use it for other services in the future.
I roughly drew a diagram


How do I now check the token in Middleware in Brocker? With each request, ask Auth for the validity of the token?

Answer 1

If the token can be revoked, then yes - for each request you will have to check if it is valid.
If it is impossible to revoke, then you can see the expiration date in the token itself (JWT)