api-proxy-for-an-app

Use it when

• Code outside Stacksync (a script, a backend, an internal app) calls one app's API.
• At least 2 callers or 1 outside party need access, and none should hold the app's login.
• The calls are ad hoc or request by request; for a steady copy of tables use a sync.

Why this design

Advantages:

• The app's credentials stay in the connection; callers hold only a proxy token.
• A proxy is bound to one connection: switching the connection moves every caller at once.
• Deleting the proxy stops all its tokens at once.

Trade-offs:

• The token is shown once, in the web app; a lost token means generating a new one.
• One proxy reaches one app through one connection; another app needs another proxy.
• The caller still writes the app's API calls and handles its limits.

Alternatives and why they lose: