I think that Auth Tokens are easy to understand, use, and implement. They can generally be invalidated if the developer feels that they have been compromised.

I think that Auth Tokens are easy to understand, use, and implement. They can generally be invalidated if the developer feels that they have been compromised. Some APIs also use self-invalidating auth tokens based on an expiry date. For more secure data, I'd prefer that.