Machine-to-Machine Access

Private JWT vs. client secret

Choosing how an M2M client authenticates itself
Report issue

Covers the tradeoff between a shared client secret and private key JWT authentication for a machine-to-machine client, and when the stronger option is worth the added setup.