How to ensure that the authentication information (AccessToken, etc.) sent by the client is not obtained or forged? Which encryption...