Hi,
It's fairly easy to generate an API key for the FusionAuth APIs, which is great. However I now also want to protect my application outside of the user context for application<>application communication.
Is there an obvious way I'm missing to achieve this with the current functions offered by FusionAuth?
- I could create a service user with oAuth validation and refreshing the tokens, which is fairly heavy for the use case
- I could just work outside of FusionAuth and semi-hardcode API keys in the API to check the validity
Let me know, thanks!