Clarification on Licence Key API requirements

[sgcullen]

I'm looking at the license key API and what if any authentication requirements it has. It's not entirely clear to me. The following suggests that auth perhaps isn't required:

https://docs.polar.sh/api-reference/customer-portal/license-keys/validate#body-organization-id

From the docs:
https://docs.polar.sh/api-reference/customer-portal/license-keys/validate

Does the organisation_id need to be kept private? Is a customer Session needed?

The reason I ask all this is I'm creating a client-side only application and if licence keys can be used securely with no auth required, they are a nice solution!

[Tropicalista]

I think that organization_id does not contain any private value. It's just a field to inform the api what organization the license belongs to.