API-Security-Checklist
API security guide
A comprehensive checklist for designing and securing APIs.
Checklist of the most important security countermeasures when designing, testing, and releasing your API
23k stars
544 watching
3k forks
last commit: 11 days ago
Linked from 8 awesome lists
apijwtoauth2security
hack-with-github/awesome-hacking
kristories/awesome-guidelines
yosriady/awesome-api-devtools
marmelab/awesome-rest
stn1slv/awesome-integration
spacial/awesome-systools
gitcommitshow/awesome-authentication
netanmangal/awesome-hackingRelated projects:
| Repository | Description | Stars |
|---|---|---|
 gokul595/api_guard | Provides JWT-based authentication with token refreshing and blacklisting for Rails APIs | 276 |
 fallibleinc/security-guide-for-developers | A comprehensive security guide for developers to help create more secure systems | 20,935 |
 hakky54/mutual-tls-ssl | A tutorial project demonstrating a secure API setup with TLS/SSL authentication for Java-based web servers and clients. | 573 |
 gitguardian/apisecuritybestpractices | Resources to help developers keep sensitive information secret and mitigate potential security breaches | 1,919 |
 chrisbjr/api-guard | A package for authenticating RESTful APIs with API keys in Laravel | 692 |
 github/secure_headers | Automates the application of security headers to protect web applications from various threats and vulnerabilities. | 3,165 |
 dwyl/learn-json-web-tokens | This project teaches how to use JSON Web Tokens for authentication in web and mobile applications. | 4,180 |
 apiaryio/dredd | Tool for validating API implementations against their own documentation | 4,189 |
 auth0/jwt-decode | A library to decode and parse JSON web tokens | 3,219 |
 mrtolkien/fastapi_simple_security | Security package for FastAPI API key authentication with simple setup and administrator endpoints. | 329 |
 firebase/firebaseui-web | A JavaScript library providing simple, customizable UI bindings on top of Firebase SDKs for authentication and sign-in management. | 4,613 |
 blst-security/cherrybomb | A tool that audits and tests API specifications to prevent security errors and ensures APIs function as intended. | 1,156 |
 flipkart-incubator/astra | Automated testing framework for detecting vulnerabilities in REST APIs | 2,520 |
 enablesecurity/wafw00f | A tool to identify and fingerprint Web Application Firewalls. | 5,322 |
 tymondesigns/jwt-auth | An authentication package providing JSON Web Token support for Laravel and Lumen web frameworks | 11,320 |