What is not a method for API authentication or authorization?
username and password
API Keys
biometrics
OAuth