Security

OWASP Top 10

The OWASP Foundation is known for its top ten web application security risks. Now the foundation has also collected the top ten security considerations for API projects.

Developers should know of and review these items regularly against their APIs.

https://owasp.org/www-project-api-security/

Authentication & Authorisation

island.is provides a Authentication Service, see its documentation for further details on authentication flows and authorisation of endpoints.

https://docs.devland.is/technical-overview/auth