Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

What would be the best way to have a user authenticate programmatically? I'm working on a REST API for my application and would like for the end user (the consumer of the API) to be able to authenticate using APIs and receive a token that they can then pass into subsequent requests.

Hi <@U05GSCVS9DW>

If these are first party users to your system, then you can use the native `api` endpoint. <https://www.ory.sh/docs/identities/native-browser>

If they are machine accounts (IoT device) that are native, you can use OAuth client credentials. <https://www.ory.sh/docs/oauth2-oidc/client-credentials>