I have created a custom authentication filter that only allows access from white listed IP addresses. I configure this using an access token instead of a user and the IP address instead of the password. An example:
accessToken1=123.123.123.123,publicApi However, some customers have more than one public IP address that need to access our API. What is the recommended way of supporting something like that? I don't think it is possible to list multiple passwords which would be needed using our existing strategy. Is there some class/interface I could subclass/implement to enable the authentication to accept any password in a list of passwords? /Bengt