What I mean by Internal and External API's:
Internal API: will be used by my front-end Apps (Web or Mobile).
External API: will be exposed to developers in order to integrate with my API from their systems.
Who can access my API:
- My Admin Panel Web App (with multiple roles: Admins, Managers,..).
- My User Web App (register, generate access tokens, see analytics..).
- The User third party System (the user custom App that should be integrated with my API).
My question is:
What is the recommended way to authenticate the different types of users (My Web Apps + Users third party Apps)? Please share your solution. Thanks.