❔ api to api authentication
So I have two apis with which I want one to call the other now these calls won’t be initiated by a user so no API keys or bearer auth will exist, does have a shared key in the header good enough or can just using CORS suffice to prevent unauthorised access? Note: the api that’s being called isn’t being used by users, only other APIs in the org
