Code Patterns for API Authorization: Designing for Security
research.nccgroup.com