Hi Zhixiong,
REST API is not for sign in usage, if you pass correct API key&secret, you can always use it.
Best