Here is a guide I've found useful in the subject, https://engineering.fb.com/security/scalable-and-secure-acce....