The community member has implemented a version of email OTP (one-time password) passwordless authentication on a platform called WS. They consider it a workaround, but it works fine. The community members in the comments discuss various aspects of the implementation, such as getting stuck on a step, hitting rate limits, and the use of a login token in the request body to identify the user. They also discuss the security of the approach, with one community member suggesting combining it with a secret resource key as a reasonably secure way to handle authentication at the backend.
@Jeremy ... yes ... I basically want to have user level auth that I can use after that. The unauthorized is not needed and slightly irritating ... but I basically want the API key in the bodysystemsearch variable ... so I needed to do a document.load refresh
