Web API | How to authenticate a side service that does not have the normal login functionality

user_19321609 0
Viewed 39

I'm working on a project that uses a C# Web API. We are using JWT tokens.

We have the authentication setup for the main application that is hitting our web API.

We also have a side service that needs to authenticate to use the web API, but they do not have the necessary items to authenticate because they do not have an account.

Is there a "secure" way to authenticate a side service that does not have the normal login functionality?

jwt asp.net-core-webapi authentication security c#
1 Answers

Looks like you want an app that is not authenticated by login but still protected?. This is really not a very good implementation. In case you want to do this. You can try the solution using rsa body request encryption algorithms with signature includes in header and check. If it matches then you can implement your logics. Hope to be useful.

user_107906710
Related