I’m developing a native application consuming a rest api. Currently my rest api protected by JWT bearer. I want to limit a client using my rest ip. The idea is to add the client certificate to every client. Like we want to certify the client app at the same time authenticate the user using this client.
However i can’t merge both CertificateAuthenticationDefaults and JwtBearerDefaults. My [Authorize] attribute on my controller only able to accept either CertificateAuthenticationDefaults or JwtBearerDefaults not both scheme at the same time. Any reference to solve this?