#api-keys

#4759: API Keys vs OAuth: When Simplicity Becomes a Security Trap

API keys are simple but leak identity, scope, and auditability. Here's when they work and when they don't.