A drift-ice buoy dashboard API must call a second protected API while preserving the signed-in ranger’s identity. Which flow should the middle-tier API use?
Select an answer to reveal the explanation.
Short Explanation
The middle API still needs to act as that ranger downstream—not as a faceless daemon. That’s the on-behalf-of exchange, not client credentials.
Full Explanation
The on-behalf-of flow lets a middle-tier API present a user’s access token and obtain a new access token for a downstream API while retaining the user context. Client credentials would drop the user and call as the application only. Password grant patterns are legacy and inappropriate for this multi-API scenario.