Happy to help shine some more light on this for you. As a first step, can you check out my thread here (it’s a similar use case in some ways):
For your specific use case, if you will be hosting concurrent sessions you, you will need to have unique hosts for each session. A host/paid license can only hold 1 meeting at a given time. I would recommend a Pro or higher plan for this:
Most likely, you will want to implement OAuth if you have a large number of users and they’re not under your account. But please see my recommendation in the linked thread for JWT as well.
Let me know what additional questions you might have!