api-securityapisapp2appauthenticationcibacuritydecentralized-identitydidfapihypermedia-apiiamidentitymulti-factor-authenticationmulti-regionoauthopen-bankingopenid-connectprivacypsd2security-architecturetoken-handler-patternwebauthnzero-trust