https://www.illusionsofwisdom.com/securing-apis-best-practices-and-common-pitfalls/
Securing APIs: Best Practices and Common Pitfalls