I approached our architect with a solution in which all of our microservices verify the auth of the user invoking the call. Basically, what I've been doing for years, on different projects. He basically said that I'm digging my own grave and proposed an infrastructural layer, a proxy, which will authorize the requests instead and if request is allowed, will forward the request to the microservice, without passing on the data about the user to the microservice (has service-to-service authentication).
Has anyone done this? What are the benefits and is it worth the effort?