How do you prevent end users for getting access to a plain text auth token?

Hi George, It would be more optimal to put Nordigen behind a proxy that authenticates end users (as you write yourself). In the more medium term, Nordigen also has user level permissions on our roadmap, that would be another way how such situations could be solved.