When working with HTTP-triggered functions, you can configure user-based authentication for the function. This is a built-in option of Azure App Service, which allows you to easily configure multiple identity providers to authenticate your users. For a general overview of the feature, please visit https://docs.microsoft.com/en-us/azure/app-service/app-service-authentication-overview.
When user authentication is configured, you can leave the function authLevel at anonymous, as the HTTP request will need to be authenticated before the URL can be accessed. If you do, however, need to secure access to the resources on a function-by-function basis, you can use the function API keys in combination with user-based authentication. ...