people are going to get the content if they want it. if you start requiring authentication for API access, then they will just scrape the HTML, which will just

people are going to get the content if they want it. if you start requiring authentication for API access, then they will just scrape the HTML, which will just put more of a strain on your servers. best solution I have seen to this issue is just allow anonymous requests, but rate limit them. but please dont go idiotic like Instagram/Twitter, who rate limit in some cases to 9 posts a day.