title: Authorization between micro services and users
body: <p>What would be best way to handle access and authorization between microservices and users?</p>
  
  <p>I'm building an application on microservice architecture. Services speak to each other through REST. there are endpoints that should be accessed only by other microservices and not directly by users, some endpoints are public and some would require users to register or have admin privileges. On top of that Users will have roles like admins and regular users.</p>
  
  <p>I'm trying to figure out if Oauth2 and scopes is the best approach for what I'm trying to achieve. e.g. each microservice will have "user" that have permission on certain scopes like "service1-place-order". </p>