Security-First API Design
blog.restcase.com