Scoped Authorization Tokens

Implement fine-grained permission scopes to limit access rights for mobile-specific API keys.