Hello,
Thank you @juniorconte and @jraiche.
Junior, the first part, "for authenticated users", I put to work.
My intention is to permit a 3rd party developer use a API endpoint without need to make a login, the ideia is this "3rd party" developer in the call pass another key, something like a "X-Developer-Key" (can be with the Dreamfactory Key).
In the "pre-process" validate the "X-Developer-Key" and if all ok, the permit the request.
Now, It is made in the "Service" or need to create an "Apps" ?
To create an "App" is to create a folder in the server and create my code and configure "App" to use this url ?
I have "confusion" between a Service and an Apps. I think an "Apps" is not a API endpoint, but a 'place' to show (frontend) to a user (a clone of Swagger, or a FAQ page, Or a "Backend" to users...) !
Regards,
Luis