Is there a plan for private/restricted content API

[Kevin]

Oh, sorry, I didn’t understand from your initial message that you meant members-only content.

The Content API is usable with JWTs. A couple of posts that should point you in the right direction:

Use Ghost members auth to log-in to custom app via cookies

Hey! This is definitely doable but it’s gonna be a hack either way as these are not publicly documented or stable methods. You can either get a JWT for a member and use that to authenticate into your application, but this won’t handle logout when the member logs out of Ghost. Or you can use the cookies like you say, but this will be a little more involved and require your app to be running on the same domain so that the cookies can be shared. External auth with JWT You can make a GET request…

Where can I find `members_public_key` to validate a JWT?

Hi @disaza You can find this at /members/.well-known/jwks.json on the frontend domain of the site! It’s in the “JSON Web Key Store” format - and can be parsed/handled by libraries like jose, node-jose, and jwks-rsa