ContextThe service you are developing provides APIs for users. When an user calls an API, (s)he must show a short-living authorization credential, e.g. an OAuth2 token.The user creates, owns, updates or deletes resources in the service on …