Secure Authentication Options for Infoblox API

[#1]

Hi.

I'm using the Infoblox NIOS API and currently authenticate using session cookies (ibapauth). While this works, I'm looking for a more secure method to authenticate API requests without relying on cookies.

Does Infoblox support authentication using API tokens, or client certificates?
If not, what are the recommended  wayt to improve security when using session-based authentication?

Would appreciate any insights.
Thank you.

[#2]

Another question,

I've noticed that the cookie I use does not expire, even after long periods of inactivity.
Typically, I'd expect the session to time out based on Infoblox's security policies or session timeout settings, but in my case:

1. If I log in and save the cookie, I can continue making API requests hours later without re-authentication.
2. Even in the Infoblox GUI, if I leave the session open and return later, I am still logged in.

Does anyone know if there’s a specific setting in Infoblox that controls API session timeout?
Or is this expected behavior for WAPI authentication?

In the grid options, the "token usage time" is set to 10, but still, I don't think it's work..

Thank you again.