2 applications using the same APIs

[andy_ravl]

Hi there,

I have 3 main components to my platform: a web app, an iOS app and a suite of APIs. The APIs basically read and write to a database and they are called by the web app and the iOS app.

My problem is that a user triggering an API from the iOS app has a different Audience in the JWT than the user in the web app. This means that I can only configure the API server to accept the tokens from EITHER the web app OR the iOS app, not both.

Am I approaching this wrong?

[tyf]

Hi there @andy_ravl!

@andy_ravl

My problem is that a user triggering an API from the iOS app has a different Audience in the JWT than the user in the web app. This means that I can only configure the API server to accept the tokens from EITHER the web app OR the iOS app, not both.

While I’m not positive this will suite your particular use case, it may be worth looking into configuring a single logical API (resource server) for your APIs - This way tokens will have the same audience.

Configure Logical API for Multiple APIs