Among the most important areas of concern for decoupled Drupal architecture is security. By nature, decoupled Drupal introduces substantial security concerns that have implications for the data stored in Drupal as well as the safety of users who access Drupal content through a consumer. Indeed, one of the drawbacks of decoupled Drupal cited in Chapter 6 was the increased onus on developer teams to build in robust authentication.
There are three approaches in Drupal 8 for authentication that are relevant to decoupled Drupal. Basic Authentication and OAuth2 Bearer Token authentication ...
