[yoeven]

How do you solve the access control part? Did you build the layer ontop or more like a auth redirect?

[JonanJ]

Using OAuth2.0 standard for authentication & authorization then using the access token from that to call our APIs to track usage!