Security - Good practice

Limitations

Limit token creation for end users. Unlimited token generation by end users may lead to additional verificaitons, which would increase your credit consumption.

Token generation - Backend

Token generation should always take place in backend, with no oportunity for end users to change data in token generation. Failing to do so may lead to abusive verifications.