OWASP : The Open Web Application Security Project (OWASP) is a worldwide not-for-profit charitable organization focused on improving the security of software.
HTTP API design : This guide describes a set of HTTP+JSON API design practices, originally extracted from work on the Heroku Platform API.
JSON API : A specification for building APIs in JSON. Clients built around JSON API are able to take advantage of its features around efficiently caching respons...
Checklist of the most important security countermeasures when designing, testing, and releasing your API.