We have a customer facing API where we give API Keys that map back to users. Once we look up the userName via API Key we then need to get a JWT from identity server. How can this be done without supplying the password?
1 Answers
This sounds like a job for a custom grant type. Another option is to issue long lived reference tokens which effectively become the API key.
Related