Hello, I am creating my first Ash Json API with Phoenix. I am playing with swagger, and I have some questions. How can I add authentication and authorization? Is it derived from AshAuthentication policies? How can I get the bearer to test the API authorization? If I define a policy like this on…

If you want to forbid anyone without a bearer token that is best done in a plug in your router. Are you using AshAuthentication? Read actions apply policies by filtering by default. This protects from various security problems.You can change that by setting access_type :strict in the policy, but I…

Elixir Programming Language Forum

Protecting the API

Questions & Help Questions

adrian December 19, 2024, 7:12pm 3

Thanks @zachdaniel !