Question (Solved)

Recommended workflow for allowing only server to access API?