Comment by neikos

This sounds like authentication with extra steps? Why not just send a bearer token?