API Keys for your own applications
-
Hi,
It's fairly easy to generate an API key for the FusionAuth APIs, which is great. However I now also want to protect my application outside of the user context for application<>application communication.
Is there an obvious way I'm missing to achieve this with the current functions offered by FusionAuth?
- I could create a service user with oAuth validation and refreshing the tokens, which is fairly heavy for the use case
- I could just work outside of FusionAuth and semi-hardcode API keys in the API to check the validity
Let me know, thanks!
-
Hiya,
We have 4 different options for that.
https://fusionauth.io/docs/v1/tech/guides/api-authorization/
Client credentials is the most straightforward, but requires a paid license. The other options are outlined in detail in that doc.