What I mean by Internal and External API's:Internal API: will be used by my front-end Apps (Web or Mobile).External API: will be exposed to developers in order to integrate with my API from their systems.Who can access my API:My Admin Panel Web App (with multiple roles: Admins, Managers,..).My User Web App (register, generate access tokens, see analytics..).The User third party System (the user custom App that should be integrated with my API).My question is:What is the recommended way to authenticate the different types of users (My Web Apps + Users third party Apps)? Please share your solution. Thanks.
How to manage authentication for internal and external API?
design;architecture;api;authentication;authorization