# Accesso senza password tramite link generato dall'API

**URL:** <https://meta.discourse.org/t/passwordless-signin-via-link-generated-by-api/79617>\
**Category:** Feature\
**Created:** [2 Febbraio 2018, 10:51am UTC](https://meta.discourse.org/t/passwordless-signin-via-link-generated-by-api/79617 "2018-02-02T10:51:26Z")\
**Posts on this page:** 1\
**Showing post:** 15

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [4 Marzo 2019, 9:35pm UTC](https://meta.discourse.org/t/passwordless-signin-via-link-generated-by-api/79617/15 "2019-03-04T21:35:45Z")

</div>

> [@parisa](#):
>
> I do an api call to discourse to see if the user/pass

This is very confusing to me. If you make this API call you get the `_t` cookie back which you can use. So just use that in your web view?

Or do you somehow have the master API key embedded in your app, if that is the case I would urge you to rethink this asap.

---

_[View the full topic](https://meta.discourse.org/t/passwordless-signin-via-link-generated-by-api/79617)._