Secure REST API using host authentication certificates and crypto policies

[efernandl]

Hello,
Aiming to build a secure REST API, I wonder how flexible Loopback 4 is to configure cipher suites (encryption policies) and keystore (security certificates). The idea is to create a secure REST API that doesn't create its own authentication strategy, but uses the same authorization certificates, public key certificates, and cipher suites that are used in the SSL handshake to the host (RHEL8) where the REST API is running.
Best regards,
Elizabeth