There should be a single auth provided for the service layer. Maybe depending on the argument type, we can say if it's an auth client or an apiKey.

So I can have

~~~ js
shortener.auth('MY_KEY_HERE');
// or
shortener.auth(authClient);
~~~