# Use Bubble to Authenticate w/ External API

**URL:** <https://forum.bubble.io/t/use-bubble-to-authenticate-w-external-api/234562>\
**Category:** Need help\
**Created:** [November 28, 2022, 11:02pm UTC](https://forum.bubble.io/t/use-bubble-to-authenticate-w-external-api/234562 "2022-11-28T23:02:28Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![solomo-dev](https://avatars.discourse-cdn.com/v4/letter/s/898d66/32.png) [@solomo-dev](https://forum.bubble.io/u/solomo-dev)\
**Post date:** [November 28, 2022, 11:02pm UTC](https://forum.bubble.io/t/use-bubble-to-authenticate-w-external-api/234562/1 "2022-11-28T23:02:28Z")

</div>

Hello,

I would like to use Bubble to authenticate w/ an external API. For instance, when an API request is sent, a JWT is included. The external API would receive that token, then send it to a Bubble API endpoint to verify that the user session is valid, and even grab details about the user like their ID and email address.

Is this possible out of the box, or even with some custom code?

Thank you!

---

<div class="post-metadata">

**Author:** ![jonah.deleseleuc](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/jonah.deleseleuc/32/199133_2.png) [@jonah.deleseleuc](https://forum.bubble.io/u/jonah.deleseleuc)\
**Post date:** [November 28, 2022, 11:14pm UTC](https://forum.bubble.io/t/use-bubble-to-authenticate-w-external-api/234562/2 "2022-11-28T23:14:02Z")

</div>

It’s possible now with Security Salamander 😉 You can now authenticate **Backend API Workflows** with JWT, HMAC, encryption, etc, etc…

> **[Security Salamander Plugin for Bubble, by Vision Code](https://bubble.io/plugin/security-salamander-1663435146008x443864692317224960)**
>
> Security Salamander Plugin page on Bubble, by Vision Code. Add Security Salamander in one click to your app. Bubble lets you build web apps without any code.

It’s currently available but it’s still in a beta phase. If you face any issues, I’m super responsive and very active on the forums. You could always message me or make a feature request or make a bug report.

---

<div class="post-metadata">

**Author:** ![solomo-dev](https://avatars.discourse-cdn.com/v4/letter/s/898d66/32.png) [@solomo-dev](https://forum.bubble.io/u/solomo-dev)\
**Post date:** [November 28, 2022, 11:33pm UTC](https://forum.bubble.io/t/use-bubble-to-authenticate-w-external-api/234562/3 "2022-11-28T23:33:20Z")

</div>

Thank you for responding so quickly! Would I basically be using this plugin to create the token in the workflows that interface w/ my API? Something like:

Workflow Triggers → JWT Created w/ Plugin → API Called w/ JWT in Header

---

<div class="post-metadata">

**Author:** ![jonah.deleseleuc](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/jonah.deleseleuc/32/199133_2.png) [@jonah.deleseleuc](https://forum.bubble.io/u/jonah.deleseleuc)\
**Post date:** [November 28, 2022, 11:46pm UTC](https://forum.bubble.io/t/use-bubble-to-authenticate-w-external-api/234562/4 "2022-11-28T23:46:18Z")

</div>

Yeah you could do something like that. You’d create a JWT and include in the header of an API call, for example.

If your API service is with Bubble, you could use Security Salamander to decode the JWT as well 😄

If not, then just create the JWT and send it out! 😃

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/bubble/original/3X/2/8/2847faa74692c2ffa5d939d3dc3724cdd060d247.png) [@system](https://forum.bubble.io/u/system)\
**Post date:** [February 6, 2023, 11:02pm UTC](https://forum.bubble.io/t/use-bubble-to-authenticate-w-external-api/234562/5 "2023-02-06T23:02:39Z")

</div>

This topic was automatically closed after 70 days. New replies are no longer allowed.