Great answer. One thing I'd like to add is if you're using bearer tokens, make s...

MattBearman on Jan 16, 2018 | parent | context | favorite | on: Ask HN: What's the recommended method of adding au...

Great answer. One thing I'd like to add is if you're using bearer tokens, make sure your API has an easy way to invalidate and regenerate them, as anyone with the bearer token has full access.