I have a multi-tenant web application that allows authenticated users to make changes to their application instance - making comments as an example.
I'd like to build an API that allows a user of any external web app to be able to perform an action in my app and record the action as having been carried out by the logged in user of the external app. E.g "Wanda Bloggs commented 3 minutes ago"
Is this possible while keeping the API as generic as possible? (not tied to one specific external app). What should I be looking at to be able to implement this?
Another option is to just mark all API activity something like "API user commented 3 minutes ago" but that way too anonymous and far from ideal.
Any guidance or pointing in the right direction appreciated!