0

JWT Token is generated in our application and using the same token within the expiration time I can call my API from postman also. I need to restrict that , so how can we identify if the API call with JWT token is coming from Postman or from browser and how to authenticate it in .net core ?

therealak12
  • 1,178
  • 2
  • 12
  • 26
Aswin Moothedath
  • 35
  • 6
  • Does this answer your question? [.Net Core API JWT Token Validation](https://stackoverflow.com/questions/66891211/net-core-api-jwt-token-validation) – Darem Jul 16 '21 at 06:14
  • 1
    I think [this answer](https://stackoverflow.com/a/62015405/9070016) can help you. As it says, Postman sends a header named postman-token which can be used to check if the request is sent from Postman. – therealak12 Jul 16 '21 at 16:35

0 Answers0