I'm trying to build a platform where a Supplier can login to the platform, a normal web login.
But from the outside webshops can place orders using my REST API. Each webshop should be able to place an order but how would I go about authenticating those webshops?
Should I generate a sort of token for each webshop which they have to send in each request? Is it possible using JWT to issue a token to each shop that they will use for life? And so I know which shop is trying to create an order?
Looking very forward to your ideas. Thank you.
via Notflip
