Authentication and authorization

[ErwanCheriaux]

Create API_KEY to authorize user access to the API endpoints. Use Authorization header to verify the x-api-key

sources: Best practices for REST API security Protect your APIs with OAuth2 Middleware example Authentication vs. Authorization

Use the enlisted resources to implement Authentication on the Client App: OAuth2 to authenticate users. Jwt as an authorize token

[ErwanCheriaux]

new goal: use OAuth2