I'm using a custom UI, and I've broken the SuperTo...
# support-questions-legacyv
Vaune_
05/05/2023, 11:42 PMI'm using a custom UI, and I've broken the SuperTokens auth core / api out to a dedicated server ( it does not share the server with my application api ). If I wanted to go about securing the API as a microservice, is there good documentation on that?
Vaune_
05/05/2023, 11:44 PMThe backend api should be able to verify the session coming from the front end, against the separate auth server.
r
rp_st
05/06/2023, 4:56 AMhey @Vaune_ for this, enable JWT based sessions, fetch the JWT on the frontend and add it to the request headers when calling your API.
Your api can then do regular JWT auth
v
Vaune_
05/06/2023, 4:42 PMThanks, will give it a shot!
Vaune_
05/06/2023, 5:02 PMWhere can I get the verify signature when validating on the backend api?
r
rp_st
05/06/2023, 5:02 PMWhat do you mean?
v
Vaune_
05/06/2023, 5:02 PMSorry, just saw this doc: https://supertokens.com/docs/microservice_auth/jwt-verification/index