I recently developed a RESTful service that my windows desktop application is using for retrieving information from a MySQL DB sitting on a Linode server. The desktop application is written in .Net and obfuscated so that all urls are encoded. I developed the RESTful service in Spring but had a lot of issues with Spring Security and I was thinking that maybe authentication is not necessary as I am the only user. If the code is obfuscated then it will be hard for anyone to get the endpoints and start using my web service. So question is, is my logic valid or should I secure my API even if I have to struggle with OAuth and Spring?