# How to secure API endpoint

**URL:** <https://community.auth0.com/t/how-to-secure-api-endpoint/8224>\
**Category:** Get Help\
**Tags:** security, jwt-validation, api\
**Created:** [September 18, 2017, 12:32am UTC](https://community.auth0.com/t/how-to-secure-api-endpoint/8224 "2017-09-18T00:32:02Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![nurlan.nurmanov](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@nurlan.nurmanov](https://community.auth0.com/u/nurlan.nurmanov)\
**Post date:** [September 18, 2017, 12:32am UTC](https://community.auth0.com/t/how-to-secure-api-endpoint/8224/1 "2017-09-18T00:32:02Z")

</div>

For my website (REACTJS based), I created Spring Boot based REST API.  
I would like to secure it using JWTs, but from my understanding, JWTs has to be generated on server side. How could I use JWTs when they are generated on AUTH0 side, do es my backend need to request JWTs the same way the website does? I use auth0-js to authenticate the users.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 2, 2018, 5:56am UTC](https://community.auth0.com/t/how-to-secure-api-endpoint/8224/2 "2018-03-02T05:56:33Z")

</div>