Our beta users hacked our APIs for something we didn't even know we could do

Hey all, I'm Dhruv and also the Co-Founder at EZiD (https://www.ezid.io/). We actually started this because all of us hated passwords and built our APIs thinking that users would only use it for simple passwordless sign up and login and we even got a few beta users who switched from Auth0 or their own custom auth methods to try us out because they believed our APIs were a lot more flexible.

Little did we know that our beta users were also using our APIs for other reasons such as outbound email marketing where they would embed a users email into the CTA and just like the sign-up process bypass the auth wall so they could claim any discount or promotion that was being sent to them.

This made us think how auth should actually be reimagined. Instead of it just being at the start, we should start thinking what kinda auth, when, and where in the user journey it should be used.

Here are the docs incase anyone wants to play around with it! We're still in closed beta but happy to onboard a few more users if anyone is keen to join us

https://foremost-cotija-b6e.notion.site/Docs-94f0a168c0914a61ab5339c32750577e

Our beta users have seen a user conversion go up by 175% and we are close to 1200 MAU!

Also, we know our website doesn't look the best and this is because we put all our effort into making sure our APIs robust and bringing on early beta users to test our product