Hi,
We have setup an application using aspnetzero v6.9 using .net core mvc and jquery.
Now there is another system that would like to make a connection to our application. The other system would need to make a webservice call (insert data) on behalf of a tenant. Not all AppService calls should be available just a specific call.
How would I set that up within the current configuration.
At this moment we are not using the Host project. Should I use the host project or would it be recommended to set it up in the mvc app that is running. How would the users authenticate to use the API?
If anyone could point me in the right direction that would be appreciated.
Best regards Patrick
2 Answer(s)
-
0
Hi Patrick,
MVC project also contains TokenAuthController.cs, so token based auth can be used, see https://docs.aspnetzero.com/documents/aspnet-core-mvc/latest/Infrastructure-Core-Mvc-Token-Based-Authentication
You can create user for this specific usage for the target tenant and grant this user permissions only for the endpoints you want your customer to use.
-
0
Thanks, that should do the trick!