Ladies & Gentlemen , I have a following problem , which I am trying to resolve using best practices.

We have an API server , which uses Authoriaztion with JWT token to call our api endpoints. Now we need to develop Multi platform application (Android,Ios,Web) to consume this api.

We are planning to use .net MAUI for Mobile and Blazor for Web application. All these applications will have a common userbase.

Also we would like to share api to 3rd parties , and we would like also to put their users in our common user base.

What would be the proper approach to do it ? Should we add Identity server to our Web API project ? Should we Create separate Identity Server project which will share userbase ?

What would be the best practice to resolve such task ?

CodePudding user response：

I would recommend to use IdentityServer and also do host it in a separate service is a best practice.

Because otherwise it will be harder to debug and troubleshoot when you mix IdentityServer with other services.