title: How to secure a REST Api on flask
body: <p>I need to develop a Rest API on my app (Based on Flask)</p>
  
  <p>But I don't really know how I should secure it.</p>
  
  <p>Currently, I have a normal authentication for users who are coming from a browser. (Using the session etc.)</p>
  
  <p>But for the API users, should I ask the username/password at every API request ?
  Is it really secured ?
  I know than a lot of web API use tokens for API calls, is it a best way ?</p>
  
  <p>And in this case, how to implement it ? (This is not really my field of expertise..)
  Thanks a lot</p>