Implementing API Key Authentication In Your APIs

[ataadevs]

Do we need to register it in startup class

[pt_trainer]

Ive always wondered, how would this be done in a real world scenario if users can generate, revoke their own keys .

Doing it by storing it in the db is mainly for server to server calls right?


What about a client facing api key authentication, whats a method to approach that? Are third party providers preffered in this case?

[michaelakin]

Could you show implementing an API key for backend requests, as well as oauth for the website to use?

[rebudyl]

What about async calls? IAuhorizationFilter is synchronous! Custom auth scheme would be much better solution tbh

[emfi]

I prefer using a middleware, is more explicit

[innovationscode]

Please don’t write over the lines of code you are showing us
Thanks