If a developer builds a Javascript web app without any servers, how do you know what to charge them for bandwidth? The developer cannot store auth tokens in the client code because anyone could see it. If someone steals the auth tokens, then they can spoof the developer and the developer ends up being overcharged. Or am I missing something?
I'm excited to try this out next time I start a new project. the allure to only having to write a backbone app and no server is pretty interesting to me.