Here's my use case. I'm working on an application integration to run workflows/apps in our private gallery from our business application. I have implemented the API calls from our business application to the Gallery APIs and it works great. Now I want to fine-tune security authorization, that is, I do not want to make all API calls using the oAuth key/secret of a service account. Rather, I'd like this service account to retrieve the actual user's key/secret based on the user Id to build the oAuth signature for the API calls. This way we can use Gallery and Collections permissions to manage who can run what apps from the APIs.
I have checked every API under "Admin V1", "Admin V2" and "User V2" on the Swagger screen but didn't find any API for this. Is this possible?