Explainers: Authentication
OAuth vs API Keys: Choosing an API Authentication Method
OAuth and API keys identify different actors. Here is how to choose by principal, scope, lifetime and revocation.
3D Secure: Frictionless vs Challenge
Frictionless and challenge are two 3DS paths. The issuer decides which one checkout must handle.