https://talaat.dev/blog/how-to-secure-your-apis-against-common-attacks