Pergunta de entrevista da empresa Walmart

How would one authenticate REST api calls so as not to expose the API for usage to everyone in the organization