Web Security, Part 5: Bearer Tokens

One login with a password, then a signed token that any service can check by itself