What is not a method for API authentication or authorization?
OAuth
username and password
biometrics
API Keys