I have a joomla site and wish to run a piece of vanilla Java-script (that I wrote) on this site.
The java script requires access to an API (which I have made).
I would much rather not have to implement a separate JWT system for this API as I anticipate technical problems syncing the two sets of permissions on the api and on the joomla site.
If I set up the API as a reverse proxy from the apache server can I use a custom joomla system plugin to control the access to the API? A solution as described in this question perhaps?
How to restrict access to custom component views?
Or will this not work? I don't really understand joomla enough to tell.