RESTful API that provides user application authority to authorized client apps