title: Endpoint authorization for service to service call
body: <p>I have a .net core API with multiple endpoint. I am using Identity Server 4 for authentication. Token will be generated based on correct user name and password.</p>
  <p>In the Same API, I want to add another endpoint which should only be accessed by API call only and normal user should not be able to access the end point.</p>
  <p>I am thinking of Policy based authorization for the endpoint.</p>
  <p>Is it a correct approach?</p>