I want to know the recommended approach for having asynchronous back-end services that are secured through bearer tokens call each other?
I have an interactive web application that calls a back-end service passing an access token in the
Authorization header. This back-end services starts an asynchronous job that then calls another back-end service, passing along the same access token. The problem arises when the access token has expired while the first job was processing.
Seems like one relatively straight forward approach would be to have the front end pass a refresh token to the back-end, which it can use to obtain a new access token.
Are there better approaches?