https://ones.com/ja/blog/knowledge/api-security-pitfalls-and-solutions/