Top 12 Tips For API Security

Get a Free System Design PDF with 158 pages by subscribing to our weekly newsletter: bit.ly/bytebyt...
Animation tools: Adobe Illustrator and After Effects.
Checkout our bestselling System Design Interview books:
Volume 1: amzn.to/3Ou7gkd
Volume 2: amzn.to/3HqGozy
The digital version of System Design Interview books: bit.ly/3mlDSk9
ABOUT US:
Covering topics and trends in large-scale system design, from the authors of the best-selling System Design Interview series.

[@ShaluSharma-fu6bo]

I can't help but notice how the content is taught simply and concisely with a calm tone eradicating the complexity of the topic. Loved it.

[@mayankgupta2721]

1. Https 2. OAuth2 3. WebAuthn 4. Implement Authorization 5. Leveled API Keys 6.Rate Limiting 7. API Versioning 8.Allow Listing 9. OWASP Security Risks 10.API Gateway 11. Error Handling 12. Input Validation

[@J3R3MI6]

Thank you 🙏🏽💎

[@thembekilethembekile5839]

You the man

[@vonnblagaming984]

This channel has expedite my kearning to backend development. The years I missed on learning about fullstack development made me catch up all because of this account.

[@parthmahale8805]

This is so well crafted. Clear and Concise. Thank you!

[@brianbayer4868]

This channel is a GEM, thank you very much Sir. from South Africa.

[@RSKEDITS]

Thanks for making these high quality content for free man!

[@THOTHO-ie5lz]

need more security topics coverage. please create more like this one.

[@jliu7118]

Excellent examples! It’s clean and concise

[@sergenalishiwa9097]

Man. You gotta love this channel.

[@jitendrarajput8935]

Well explained, many things covered in a small video, Thank you

[@jeyashreelogesh5405]

Excellent content! Thanks for explaining in a simplified format!

[@ByteBite101]

You inspired me to make great explainers. Great video as always💙

[@peterklemenc6194]

Lovely presentation packing with great info, thank you!

[@AlexandreBOLLEREDDAT]

Crystal clear thanks !

[@CortezLabs]

Love This

[@malhaar707]

Thanks for the great video and teaching all of us API security in almost 9 minutes. What do you use to create this nice graphical tutorials?

[@hany4649]

Thank you so much for these valuable info. so, I want ask you about something what is the auth service in service side can I use it for example to duplicate the security level ? THANKS !

[@honeycombloungemusic]

Hello team - Thanks for a cool video tutorial - the audio and subtitles are not in sync in this video which could be confusing sometimes.

[@prakashinisrivastava6523]

Hey, love your videos. Which technologies you use for such animations?

[@ODSD_EXCITEMENT]

So this advice and architectural design patterns and idioms is for Restful browser based applications. It would good to see recommendations for others types of api design senariois that don't use Restful, stateless architectures.

[@KatariyaDeepak]

13. CSRF attack, fix it by adding a token synchroniser pattern.

[@danielschmider5069]

csrf is not possible on restful apis if (or because) it doesnt use a cookie No cookies = No CSRF If you do not use cookies, and don't rely on cookies for authentication, then there is absolutely no room for CSRF attacks, and no reason to put in CSRF protection

[@XiaomingCai]

hi, thanks for yet another great video! I wonder if you could share which programme that you use to create this video? that is amazing!

[@gkmusic2008]

Curious if you would tell us what presentation tool you are using for these videos ?

[@talktotask-ub5fh]

Great content

[@kiryl7345]

Thanks! Do you think it's enough to have Authentication in Gateway service only?

[@shahmohms]

Sir, great work. What tools or software do you use for above tutorials?

[@kubbomicheal9996]

Good job. Informative & well explained.

[@vnit4security]

Nice animation

[@raj_kundalia]

Thank you!

[@FayYoutube]

Why did you disable the subtitles ?

[@AYYO]

Cool!

[@gus473]

💯th "Like!" Thanks, BBG! 😎✌️

[@amitghuge7318]

What about Cross-Origin Resource Sharing (CORS) to secure api?

[@MuhammadUsmanKhan-sw8lm]

nice sir

[@chokmah3926]

gold

[@jialiangsong2871]

cool

[@purnimajain9959]

The subtitles do not match the video.

[@rajaulghufran]

For free????

[@alisoltani5636]

As everything should be

[@Elba_Nanito]

Free for?

[@abahiduh3246]

Free but could be appreciated... For free? question of the century?

[@indramal]

How to do rate limiting ? what is the best method?

[@go0ot]

Get into API & libs to plug-in for ai llm nn

[@JafarH-ip5qh]

🎉🎉

[@augustsbautra]

0:28 Captions go off script.

[@ol_suh]

13 And no man hath ascended up to heaven, but he that came down from heaven, even the Son of man which is in heaven. 14 And as Moses lifted up the serpent in the wilderness, even so must the Son of man be lifted up: 15 That whosoever believeth in him should not perish, but have eternal life. 16 For God so loved the world, that he gave his only begotten Son, that whosoever believeth in him should not perish, but have everlasting life. 17 For God sent not his Son into the world to condemn the world; but that the world through him might be saved. 18 He that believeth on him is not condemned: but he that believeth not is condemned already, because he hath not believed in the name of the only begotten Son of God. 19 And this is the condemnation, that light is come into the world, and men loved darkness rather than light, because their deeds were evil. 20 For every one that doeth evil hateth the light, neither cometh to the light, lest his deeds should be reproved. 21 But he that doeth truth cometh to the light, that his deeds may be made manifest, that they are wrought in God. (Jn.3:13-21)

[@juliocryv]

omg this is very important, I use design api and dataflows at architecture diagram :) nice video