Several of my apps use the Fulcrum Query API to get data from other apps in a way that we now rely on heavily. However, this requires an authorization token to be hard-coded into each app. With AI now finding security loopholes so rapidly, this feels very insecure now. The safest option appears to be to create a user account with sufficient privileges to run the queries and (temporarily) to manage API keys. Use that account to create an API key then take away its 'Manage API keys' permission, but keep the account live indefinitely.

Unfortunately, that API key will have indefinite permission to access and change our data (typical of a standard mobile user). I could limit this by making a new key and updating all my apps every so often, but that's a lot of work and hardly likely to defeat anyone who gets hold of the key and uses it soon after.

So I want to request a new feature such that in data event code I can get the current authorization. (I assume that the mobile apps obtain a temporary authorization with the logged in user's email and password when connecting to the Fulcrum server.) This would then automatically have the right permissions and would be time-limited, with no hard-coded tokens at all. That feels much safer now that AI tools can find weaknesses in code so quickly.