# Can endpoints support multiple authentication mechanisms?

**URL:** <https://softwaremill.community/t/can-endpoints-support-multiple-authentication-mechanisms/171>\
**Category:** General\
**Created:** [March 29, 2023, 2:32pm UTC](https://softwaremill.community/t/can-endpoints-support-multiple-authentication-mechanisms/171 "2023-03-29T14:32:03Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Fristi](https://dub1.discourse-cdn.com/flex005/user_avatar/softwaremill.community/fristi/32/73_2.png) [@Fristi](https://softwaremill.community/u/Fristi)\
**Post date:** [March 29, 2023, 2:32pm UTC](https://softwaremill.community/t/can-endpoints-support-multiple-authentication-mechanisms/171/1 "2023-03-29T14:32:04Z")

</div>

In our current landscape we have multiple authentication means, like bearer token but also a cookie.

Would it be possible to try different authentication mechanisms?

---

<div class="post-metadata">

**Author:** ![adamw](https://dub1.discourse-cdn.com/flex005/user_avatar/softwaremill.community/adamw/32/28_2.png) [@adamw](https://softwaremill.community/u/adamw)\
**Post date:** [March 31, 2023, 9:18am UTC](https://softwaremill.community/t/can-endpoints-support-multiple-authentication-mechanisms/171/2 "2023-03-31T09:18:07Z")

</div>

Try in what sense? You can add multiple alternative security schemes (see [here](https://tapir.softwaremill.com/en/latest/docs/openapi.html#authentication-inputs-and-security-requirements)), but you’ll still need to verify in your security logic that at leas one is provided.