@arjay_mccandless: API Security Basics Some of the best practices for good API development. This is of course not comprehensive, but a few things I always consider. #coding #programming #csmajors

Arjay McCandless
Arjay McCandless
Open In TikTok:
Region: JP
Sunday 21 September 2025 22:37:46 GMT
123370
8489
64
306

Music

Download

Comments

charlietmalone
† :
@Poogus_
2025-10-29 10:04:38
0
aaron.cowie6
Aaron Cowie :
what do you do on a public non authenticated website
2025-09-21 23:07:59
2
fardarterfu
Fardarterfu :
I very seldom disagree with something you say, but CORS is a client-side protection measure for browsers, not a form of API protection.
2025-09-22 03:32:44
113
videv_tiktok
ViDev :
Arjay, mate, can you please tell me how long it takes you to make one of your TikToks?
2025-09-21 22:49:04
10
nakanakabakaka
Derek :
Yes I also know https and that’s it 😂
2025-09-21 23:49:26
1
r_santi_
r_Santi :
could the ip based rate limit afect the experience of employees that are all accessing the api through the same router/ip?
2025-09-22 12:54:14
4
rukonxiv
Joseph Alexander :
Strength before weakness, radiant
2025-10-15 22:47:43
1
timezrsa
timezrsa :
Django-cors JWT Authentication 💯
2025-09-23 16:59:13
0
bujkata9660
Bujkata :
Its surprising how many public APIs I've encountered where there's no rate limit whatsoever. Its one of the first things I think about when building an API.
2025-09-22 07:56:27
1
clines141561515
jewf9awje09fuhjw398 :
I would not let you pass with this presentationm sorry 😐
2025-09-23 16:10:36
0
pmd3v
Patrick McClory :
The model is ‘aaa’ for a reason. Authentication, authorization and access control are all necessary considerations - it also clearly talks about function before form (i.e. not getting trapped in trusting a 3rd party to ‘do all that for you’ - you have to own the outcomes even if you use a trusted library or external service)
2025-10-05 20:44:06
2
xessam
XessaM :
😁
2025-09-26 08:53:51
0
roberto_sodini
Roberto sodini :
you’re the best in tik tok
2025-09-22 07:04:01
0
ohene0307
Ohene :
How do you stop postman from accessing your data
2025-09-24 14:32:32
0
hpacifique65
hpacifique :
🙏🙏🙏
2025-10-02 11:21:48
0
renziko93
Renzo :
If you use FastAPI, you can use FastAPI Guard … amazing tool
2025-09-23 23:17:47
0
et_onelove
Kolishsho Mancho :
where is your cat?
2025-09-22 04:27:46
0
alced21
alced :
Well that is API protection. API security is all about that happens in the API transaction and ensure no abuse or unintended data access happens. :) OWASP API Top 10 is a great guidances for you audience to learn more about the most common issues
2025-09-22 06:27:39
1
burntchikinuggie
aaaahtdog :
insane timing, i was just reading about implementing security for my backend server and came across this. godsend brother 🙌🏼
2025-09-22 03:58:22
0
djjayroberts
Jay Roberts | DJ & Stuff :
Shudders in OAUTH2 for headless server to server and how utterly awful the setup for it is
2025-09-22 09:22:38
0
solo.game.develop
Solo Game Developer :
Docker compose closed network
2025-10-08 03:23:12
0
neverexceptalways
neverexceptalways :
My main take away is I need to go barefoot into interviews. That’s the main point right?
2025-10-07 05:32:14
3
brojas29
B ✓ :
Heh. ODIC.
2025-09-22 01:59:48
8
pazuso145
pazuso :
i require a simple not-really-secret plain text x api key first thing. reduces annoying bots like 99%
2025-10-13 19:17:54
0
therealslimshady0803
Shady :
Can you do an interview vid on how you would make a Facebook marketplace-like app :)
2025-09-22 00:42:26
0
To see more videos from user @arjay_mccandless, please go to the Tikwm homepage.

Other Videos


About