Secure token exchange between embedded iframe clients and OMC auth. All traffic routes through /api.
/api