title: Python backend -Securing REST APIs With Client Certificates
body: <p>We have a small website with API connected using AJAX.
  We do not ask for usernames and passwords or any authentication like firebase auth.
  So it's like open service and we want to avoid the service to be misused.</p>
  
  <p>OAuth 2 is really effective when we ask for credentials to the user.</p>
  
  <p>Can you suggest the security best practice and how it can be implemented in this context using python?</p>
  
  <p>Thanks</p>