Honeywell interview question

Authenticating API and question on cross origin