The Headless Auth SDK is intended to be used only with server-side apps to authenticate your website/app with your secure App Token. This token should be kept secret, and should not be made available to anyone on the client side for security reasons.
