In my mind, there are 6 use cases:
- GET public endpt
- POST public endpt
GET private endpt (need to use API secret key)POST private endpt (need to use API secret key)- GET private endpt while able to identify the user
- POST private endpt while able to identify the user (almost trivial)
Since I have solved 5, therefore 3 and 4 are not needed and 6 is almost trivial.
Now marking this thread as solved