We have various sensors and buttons in the space, some only consuming this API, others also triggering state changes.
To ensure that not everyone can execute actions on the API (and allow more implementations in the future) we need to implement an authentication mechanism. In this case the prefered solution is OAuth, implemented by IdentityServer4 (a .NET Core application, so it could run anywhere).
We have various sensors and buttons in the space, some only consuming this API, others also triggering state changes. To ensure that not everyone can execute actions on the API (and allow more implementations in the future) we need to implement an authentication mechanism. In this case the prefered solution is OAuth, implemented by IdentityServer4 (a .NET Core application, so it could run anywhere).