Accessing authorized API endpoints

In the API of BooksStore, or any APIs you are working with, either some or all the endpoints will be secured and will require an authorized user with the right roles and permissions. In this book, we are looking at web APIs from the client’s perspective, so we are not going to explain how the API authentication system works internally. The API documentation should tell you how the authentication works and what you should do to access the protected endpoints; if you are the developer of the API, you should know how it works directly.

In this chapter, we used JWT authentication, which is the most common form of authentication nowadays, even if you are dealing with identity providers such as Microsoft, Google, and Facebook, rather than the custom flow that we built; they all work the same. With this authentication scheme to access a protected endpoint in the API, all you should do is send the access token that the API gave to you in the login...