dotnet-cqrs/docs/observability/management-api/api-security.md

API Security

Secure management endpoints.

Authorization

app.MapEventStreamManagementApi()
    .RequireAuthorization("Admin");

API Keys

app.Use(async (context, next) =>
{
    if (!context.Request.Headers.TryGetValue("X-API-Key", out var apiKey) ||
        !IsValidApiKey(apiKey))
    {
        context.Response.StatusCode = 401;
        return;
    }
    await next();
});

See Also

• Management API Overview