API Auth Is Deeper Than It Looks | Dark Hacker News