This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(265.6, 63%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
Hi,
How can I authenticate my HttpClient so nobody can go and the URLs using another client, for example browser or Postman.
Thanks,
Jassim
Authorization is the mechanism that allows/denies access to a resource. There are many approaches to secure HTTP resources. I recommend starting with the standard docs to find an approach that best fits your security requirements.
There is a lot to read. Be sure to read the left side navigation links.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 61%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
Authentication just verifies the user, not the client application. Once you publish a web site, it’s an open api that can be used by any tool that can make web requests.
You need to be sure the site does not allow abuse, that is don’t assume you code is calling it.