validate the access with the public api