Is anyone very familiar with AuthKit and SIWF who is available sometime in the next few days to answer a few questions? 

I am building a web app that I want limited to certain FIDs. I have the basic SIWF working for authentication but I’m getting confused about how to restrict access to content and APIs based on FID.  I can’t add the check on the client side bc that’s not secure, and even if the check happens on the backend, anyone can change the FID being passed into the API. I was looking at the server side auth and custom sign in buttons but got stuck… and I’m wondering if I’m overthinking over complicating this.  Another question I have is whether authentication in miniapps are inherently more secure and harder to spoof than web apps?

Lesson learned: take the paved road.

Will happily go back to the unpaved road of miniapps but for building admin tools that have no farcaster requirement and no need for distribution, using next-auth and google libraries made this so much easier.