How to secure your Web API?
Utpal Dutta
1) Use HTTPS 2) Use token for authentication 3) Enable cors 4) Validation input values before triggering API Method
Use JWT (JSON Web Tokens). Implement OAuth2/OpenID Connect. Use HTTPS. Apply API key authentication. Implement rate limiting and IP whitelisting.
Use HTTPSAuthenticationAuthorizationJWT (JSON Web Tokens)Security HeadersToken RevocationSecurity MiddlewareLogging and MonitoringInput ValidationCross-Origin Resource Sharing (CORS)