Silent HMAC Authentication

A variant of HMAC authentication designed for unauthenticated end-users. Silent HMAC allows a client to make authenticated API calls on behalf of a guest (no login required) by signing requests server-side and injecting the signature transparently.

Use Silent HMAC for browse and discovery surfaces where users have not registered or logged in but you still need to enforce application-level access controls. e.g. A common use case is between mobile applications and websites, allowing uses to manage their preferences directly on the website . Where a user is autheticated on the application, you can use this API to enable authentication on the website.