I'm developing a new API and considering authentication methods. I've heard of bearer and PoP tokens, but I'm not sure if they are suitable for my API. Should I adopt these token types for my new API?
5
answers
Valentino
Wed Feb 19 2025
When developing a new API, it is crucial to ensure its security.
Ilaria
Tue Feb 18 2025
This approach allows existing clients to continue using Bearer tokens while new clients or those undergoing migration can adopt PoP tokens.
Carlo
Tue Feb 18 2025
One effective way to protect a new API is by using Proof of Possession (PoP) exclusively.
Raffaele
Tue Feb 18 2025
This method requires clients to generate PoP tokens, which serve as proof that they possess a private key associated with a particular public key.
CryptoPioneer
Tue Feb 18 2025
For developers upgrading an existing API, it is advisable to support both Bearer and PoP tokens for a transitional period.