Open Closed

External API users authentication best practices with ABP framework? #5434


User avatar
0
kirotech created

If you're creating a bug/problem report, please include followings:

  • ABP Framework version: v7.3.0
  • UI type: Angular
  • DB provider: EF Core
  • Tiered (MVC) or Identity Server Separated (Angular): yes

Hello,

We need to implement external API module where tenant will have machine to machine relationships with external software. For example ecommerce woocommerce platform will be creating orders in abp application.

I'm wondering what would be best practice to implement such relationship and authentication using API KEY and authorization features?

In host area we have applications, but that module lacks per tenant support.

Maybe you could give some guidance what would be the best way to implement such features.

Thank you.


5 Answer(s)
  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    The abp uses standard authentication of asp net core.

    Thats mean you can use the asp net core way to implement your needs.

    I'm wondering what would be best practice to implement such relationship and authentication using API KEY and authorization features?

    You can check some articles and open-source projects.

    https://www.google.com/search?q=asp+net+core+api+key+authentication

  • User Avatar
    0
    kirotech created

    Hello maliming,

    Thank you for your answer. I do know how to implement api key features from scratch.

    Are you sure this would be best practice for tenant api key api access features in ABP? :)

    Because we do have openiddict Applications already done in abp commercial? Do you suggest there is no possibilities to reuse that at all??

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    The openiddict doesn't support API KEY related features.

    You can implement your API KEY function, and abp will use claims to get the current user and tenant.

  • User Avatar
    0
    kirotech created

    Hey thank you for your answer. Do you have any samples or docs for such integration with abp?

  • User Avatar
    0
    maliming created
    Support Team Fullstack Developer

    hi

    The abp uses standard authentication of asp net core. So you only need to integrate it with asp net core.

Made with ❤️ on ABP v8.2.0-preview Updated on March 25, 2024, 15:11