Creating an anonymous session

I have an API endpoint that I'd like to secure. Newcomers to the site should be able to use this API 2/3 times. Then, they should be required to login before making more requests.

Ideally, newcomers would get assigned an anonymous session via some sort of fingerprinting mechanism.

Is there a way to do this sessioned-anon-user type of thing?
Was this page helpful?