I'm working on a project that uses a C# Web API. We are using JWT tokens.

We have the authentication setup for the main application that is hitting our web API.

We also have a side service that needs to authenticate to use the web API, but they do not have the necessary items to authenticate because they do not have an account.

Is there a "secure" way to authenticate a side service that does not have the normal login functionality?

CodePudding user response：

Looks like you want an app that is not authenticated by login but still protected?. This is really not a very good implementation. In case you want to do this. You can try the solution using rsa body request encryption algorithms with signature includes in header and check. If it matches then you can implement your logics. Hope to be useful.