Yes, backend-authenticated access control is possible. See <a href="https:&#x2F;&#x2F;nchan.slact.net&#x2F;details#authenticate-with-nchan_authorize_request" rel="nofollow">https:&#x2F;&#x2F;nchan.slact.net&#x2F;details#authenticate-with-nchan_auth...</a>