1. Work with own DB 2. Work with session storage with encryption of api key. Which one is fine?

This seems to be a duplicate of Which app method is efficient to create third party integration applications(connect or forge)? - #11 by SuryaA