Zapier session auth / API key auth hybrid?

Question

I am creating my first Zapier app. I am working on the authentication part and trying to achieve all of these:

1. I dont want to implement my own oauth server