Design REST API

[!note]
TL;DR: Best practice for RESTful API design is that path params are used to identify a specific resource or resources, while query parameters are used to sort/filter those resources.

GET `/cars?color=blue`

Token base authentication

HMAC authentication (API key)

1. Step 1 and 2 is user getting the API key
2. Step 3 user generate a HMAC key based on the private key and the meta data
3. Step 4 user send this key to the server.
4. Step 5 Server which then extract the metadata and generate a HMAC key on the server side
5. Step 6 and 7 server compare the HMAC key that was generated in the client vs in the server. If they're matched then the server send back the resource.