I'm developing a multi-tenant application, and for that I've developed a .Net Core API and so far I'm using JWT authentication so users have access to API Endpoits. My challenge starts when I want to validate access to endpoits of requests coming from another third party application that does not require credentials (user and password) so that it just passes the key of the tenant and that it was allocated for consumption of the API. How can I implement authentication by user credentials or APIKey?
Thank you!