Authorization: Each microservice checks the token’s validity (using OAuth and JWT)?

and enforces role-based or attribute-based access control to determine if the user

has permission to access specific resources.