How to handle internal service-to-service authentication in an SOA environment

Question

I\'m building an SOA architecture which consists of a simple NGINX-based API gateway which forwards calls from browser clients to an appropriate backend API based on their p