@arjay_mccandless: API Security Basics Some of the best practices for good API development. This is of course not comprehensive, but a few things I always consider. #coding #programming #csmajors
what do you do on a public non authenticated website
2025-09-21 23:07:59
2
Fardarterfu :
I very seldom disagree with something you say, but CORS is a client-side protection measure for browsers, not a form of API protection.
2025-09-22 03:32:44
113
ViDev :
Arjay, mate, can you please tell me how long it takes you to make one of your TikToks?
2025-09-21 22:49:04
10
Derek :
Yes I also know https and that’s it 😂
2025-09-21 23:49:26
1
r_Santi :
could the ip based rate limit afect the experience of employees that are all accessing the api through the same router/ip?
2025-09-22 12:54:14
4
Joseph Alexander :
Strength before weakness, radiant
2025-10-15 22:47:43
1
timezrsa :
Django-cors
JWT Authentication 💯
2025-09-23 16:59:13
0
Bujkata :
Its surprising how many public APIs I've encountered where there's no rate limit whatsoever. Its one of the first things I think about when building an API.
2025-09-22 07:56:27
1
jewf9awje09fuhjw398 :
I would not let you pass with this presentationm sorry 😐
2025-09-23 16:10:36
0
Patrick McClory :
The model is ‘aaa’ for a reason. Authentication, authorization and access control are all necessary considerations - it also clearly talks about function before form (i.e. not getting trapped in trusting a 3rd party to ‘do all that for you’ - you have to own the outcomes even if you use a trusted library or external service)
2025-10-05 20:44:06
2
XessaM :
😁
2025-09-26 08:53:51
0
Roberto sodini :
you’re the best in tik tok
2025-09-22 07:04:01
0
Ohene :
How do you stop postman from accessing your data
2025-09-24 14:32:32
0
hpacifique :
🙏🙏🙏
2025-10-02 11:21:48
0
Renzo :
If you use FastAPI, you can use FastAPI Guard … amazing tool
2025-09-23 23:17:47
0
Kolishsho Mancho :
where is your cat?
2025-09-22 04:27:46
0
alced :
Well that is API protection. API security is all about that happens in the API transaction and ensure no abuse or unintended data access happens. :) OWASP API Top 10 is a great guidances for you audience to learn more about the most common issues
2025-09-22 06:27:39
1
aaaahtdog :
insane timing, i was just reading about implementing security for my backend server and came across this. godsend brother 🙌🏼
2025-09-22 03:58:22
0
Jay Roberts | DJ & Stuff :
Shudders in OAUTH2 for headless server to server and how utterly awful the setup for it is
2025-09-22 09:22:38
0
Solo Game Developer :
Docker compose closed network
2025-10-08 03:23:12
0
neverexceptalways :
My main take away is I need to go barefoot into interviews. That’s the main point right?
2025-10-07 05:32:14
3
B ✓ :
Heh. ODIC.
2025-09-22 01:59:48
8
pazuso :
i require a simple not-really-secret plain text x api key first thing. reduces annoying bots like 99%
2025-10-13 19:17:54
0
Shady :
Can you do an interview vid on how you would make a Facebook marketplace-like app :)
2025-09-22 00:42:26
0
To see more videos from user @arjay_mccandless, please go to the Tikwm
homepage.