Building a Stateless API Proxy

Now that I have a private and public key for the proxy I can secure the real token. Let’s once again remember what our wise teacher, Wikipedia, told us about public-key cryptography:

So I could sign the proxy token with my private key and if anyone messed with the contents then the signature would be invalid. There’s a few ways you could think of doing it such as revoking the real token (which invalidates all proxy tokens made from that real token), revoking the proxy’s private key (invalidates every token),

Source: blog.thea.codes