Checks the authorization position. API Management implements protection in depth, so it checks the validity in the obtain token. The NGram primarily supports the argument that you will find all three in many places, and when I was Googling to test my own theories, a number of huge tech web https://troyujvis.isblog.net/detailed-notes-on-backend-web-development-53499632