Suggest using only id and secret while performing operations

Hi there,

I was suggesting to see through it and check if it is necessary for users who integrate to API, to need those API for authentications. Both authorize and refresh work so well but I had a question even though I understand that it is there for security purposes why would someone need to authenticate maybe once and refresh around every few minutes, still using that unique ID and hashed keys why can’t those keys be used and straight perform their tasks without needing to send those request for either refreshing or authenticating, for example, if someone with valid key and app id can use them to get token that they can also use to send cash in or cashout request, why can’t they use those keys and id and perform cashin or cashout request and that could save us and you 2 more request that we need. Thanks