Separation of API rights?

Question

Python

We have:
server-side: GAE + Flask
front: Knockout.js, jQuery

We would like:
links or secret knowledge on how to properly organize the separation of rights when accessing the API. Tokens, how, where, practices.

Thanks in advance.

Answer 1

en.wikipedia.org/wiki/OAuth will probably work for you.
You can also look at www.myintervals.com/blog/2009/06/19/api-authentication-methodologies/ .
We personally use a signature-based approach. Something like: www.infoq.com/news/2010/01/rest-api-authentication-schemes

Answer 2

Of course, you can't do without JS here. Open the page code, there are 3 scripts. One of them is what you need.

Answer 3

You can use sass, but if you asked this question, then it’s easier for you to cut out js ...
And on pure css you can

Answer 4

Something cannot be pulled out js. Removed all js in firebug, scrolling still works! Mystic