APIs protection #12
Description
Currently there is no authentication for APIs. We need to protect the APIs with an adequate authentication mechanism.
Possible measures
- Use cookie set during log in flow for verification purposes
- Dedicated credentials for API calls - we can pass certain credentials in headers while sending the request.