.Net Web Rest Api Core Security restriction From Client

Question

I have an rest .net core api for simple request response purpose , now i want made with licence for 30 days access api and long term access api after subscription which means initially client only use api 30 days only , after my knoweledge it will change as long term access , (this process only made by beck end of api only ) Thank you in advance !

Sachin Singh · Answer

For this you need two things 1. A payment Gateway (stripe is easy to configure, so i will recommend it) 2. API key authentication. first , user will pay though stripe (Debit/credit cards) then on sucessful transaction you will grant him to access the Auth end point. when the client will issue the request for auth end point ex:- api/Auth they will receive an API key. to access any other endpoints of your API they will need to pass this API key. for API key based authentication you can follow http://codingsonata.com/secure-asp-net-core-web-api-using-api-key-authentication/ for stripe setup https://ml-software.ch/posts/stripe-api-with-asp-net-core-part-1

Vikas Panwar · Answer

1 .one web Api for registering new user which accepts user information like username , subscriptionType(its for 30 days or other ) 2 .create another web service which accepts user name and subscriptionType and return whether user authenticated or not. Now call 2 api before other api to validate the user.