OAuth or Not: When to use claim based authentication for your API · HackerTrans