Top 12 Tips For API Security

Get a Free System Design PDF with 158 pages by subscribing to our weekly newsletter: bit.ly/bytebytegoytTopic
Animation tools: Adobe Illustrator and After Effects.
Checkout our bestselling System Design Interview books:
Volume 1: amzn.to/3Ou7gkd
Volume 2: amzn.to/3HqGozy
The digital version of System Design Interview books: bit.ly/3mlDSk9
ABOUT US:
Covering topics and trends in large-scale system design, from the authors of the best-selling System Design Interview series.

[@parthmahale8805]

This is so well crafted. Clear and Concise. Thank you!

[@RSKEDITS]

Thanks for making these high quality content for free man!

[@brianbayer4868]

This channel is a GEM, thank you very much Sir. from South Africa.

[@jeyashreelogesh5405]

Excellent content! Thanks for explaining in a simplified format!

[@sergenalishiwa9097]

Man. You gotta love this channel.

[@ByteBite101]

You inspired me to make great explainers. Great video as always💙

[@peterklemenc6194]

Lovely presentation packing with great info, thank you!

[@AlexandreBOLLEREDDAT]

Crystal clear thanks !

[@jliu7118]

Excellent examples! It’s clean and concise

[@malhaar707]

Thanks for the great video and teaching all of us API security in almost 9 minutes.
What do you use to create this nice graphical tutorials?

[@raj_kundalia]

Thank you!

[@talktotask-ub5fh]

Great content

[@XiaomingCai]

hi, thanks for yet another great video! I wonder if you could share which programme that you use to create this video? that is amazing!

[@mayankgupta2721]

1. Https
2. OAuth2
3. WebAuthn
4. Implement Authorization
5. Leveled API Keys
6.Rate Limiting
7. API Versioning
8.Allow Listing
9. OWASP Security Risks
10.API Gateway
11. Error Handling
12. Input Validation

[@J3R3MI6]

Thank you 🙏🏽💎

[@_rajaulghufran]

For free????

[@vnit4security]

Nice animation

[@hany4649]

Thank you so much for these valuable info. so, I want ask you about something what is the auth service in service side can I use it for example to duplicate the security level ?
THANKS !

[@gus473]

💯th "Like!" Thanks, BBG! 😎✌️

[@honeycombloungemusic]

Hello team - Thanks for a cool video tutorial - the audio and subtitles are not in sync in this video which could be confusing sometimes.

[@AYYO]

Cool!

[@ODSD_EXCITEMENT]

So this advice and architectural design patterns and idioms is for Restful browser based applications. It would good to see recommendations for others types of api design senariois that don't use Restful, stateless architectures.

[@kubbomicheal9996]

Good job. Informative & well explained.

[@shahmohms]

Sir, great work. What tools or software do you use for above tutorials?

[@kiryl7345]

Thanks! Do you think it's enough to have Authentication in Gateway service only?

[@MuhammadUsmanKhan-sw8lm]

nice sir

[@amitghuge7318]

What about Cross-Origin Resource Sharing (CORS) to secure api?

[@indramal]

How to do rate limiting ? what is the best method?

[@KatariaDeepak]

13. CSRF attack, fix it by adding a token synchroniser pattern.

[@danielschmider5069]

csrf is not possible on restful apis if (or because) it doesnt use a cookie
No cookies = No CSRF
If you do not use cookies, and don't rely on cookies for authentication, then there is absolutely no room for CSRF attacks, and no reason to put in CSRF protection

[@FayYoutube]

Why did you disable the subtitles ?

[@JafarH-ip5qh]

🎉🎉

[@go0ot]

Get into API & libs to plug-in for ai llm nn

[@augustsbautra]

0:28 Captions go off script.

[@purnimajain9959]

The subtitles do not match the video.

[@juliocryv]

omg this is very important, I use design api and dataflows at architecture diagram :)
nice video