I have created a custom authentication filter that only allows access from
white listed IP addresses. I configure this using an access token instead
of a user and the IP address instead of the password. An example:

accessToken1=123.123.123.123,publicApi

However, some customers have more than one public IP address that need to
access our API. What is the recommended way of supporting something like
that? I don't think it is possible to list multiple passwords which would
be needed using our existing strategy.

Is there some class/interface I could subclass/implement to enable the
authentication to accept any password in a list of passwords?

/Bengt

Reply via email to