Add content for API security best practices

src/data/best-practices/api-security/api-security.md

@@ -0,0 +1,27 @@
+---
+jsonUrl: '/jsons/best-practices/api-security.json'
+pdfUrl: '/pdfs/best-practices/api-security.pdf'
+order: 2
+briefTitle: 'API Security'
+briefDescription: 'API Security Best Practices'
+isNew: true
+isUpcoming: false
+title: 'API Security Best Practices'
+description: 'Detailed list of best practices to make your APIs secure'
+dimensions:
+  width: 968
+  height: 1543.39
+schema:
+  headline: 'API Security Best Practices'
+  description: 'Detailed list of best practices to make your APIs secure. Each best practice carries further details and how to implement that best practice.'
+  imageUrl: 'https://roadmap.sh/best-practices/api-security.png'
+  datePublished: '2023-02-21'
+  dateModified: '2023-02-21'
+seo:
+  title: 'API Security Best Practices'
+  description: 'Detailed list of best practices to make your APIs secure. Each best practice carries further details and how to implement that best practice.'
+  keywords:
+    - 'API Security'
+    - 'API Security Best Practices'
+    - 'API Security Checklist'
+---

src/data/best-practices/api-security/content/api-gateway.md

@@ -0,0 +1 @@
+# Api gateway

src/data/best-practices/api-security/content/authentication-mechanisms.md

@@ -0,0 +1 @@
+# Authentication mechanisms

src/data/best-practices/api-security/content/authorization-header.md

@@ -0,0 +1 @@
+# Authorization header

src/data/best-practices/api-security/content/avoid-http-blocking.md

@@ -0,0 +1 @@
+# Avoid http blocking

src/data/best-practices/api-security/content/avoid-logging-sensitive-data.md

@@ -0,0 +1 @@
+# Avoid logging sensitive data

src/data/best-practices/api-security/content/avoid-personal-id-urls.md

@@ -0,0 +1 @@
+# Avoid personal id urls

src/data/best-practices/api-security/content/avoid-sensitive-data.md

@@ -0,0 +1 @@
+# Avoid sensitive data

src/data/best-practices/api-security/content/cdn-for-file-uploads.md

@@ -0,0 +1 @@
+# Cdn for file uploads

src/data/best-practices/api-security/content/centralized-logins.md

@@ -0,0 +1 @@
+# Centralized logins

src/data/best-practices/api-security/content/check-dependencies.md

@@ -0,0 +1 @@
+# Check dependencies

src/data/best-practices/api-security/content/code-review-process.md

@@ -0,0 +1 @@
+# Code review process

src/data/best-practices/api-security/content/csp-header.md

@@ -0,0 +1 @@
+# Csp header

src/data/best-practices/api-security/content/debug-mode-off.md

@@ -0,0 +1 @@
+# Debug mode off

src/data/best-practices/api-security/content/directory-listings.md

@@ -0,0 +1 @@
+# Directory listings

src/data/best-practices/api-security/content/disable-entity-expansion.md

@@ -0,0 +1 @@
+# Disable entity expansion

src/data/best-practices/api-security/content/disable-entity-parsing-xml.md

@@ -0,0 +1 @@
+# Disable entity parsing xml

src/data/best-practices/api-security/content/endpoint-authentication.md

@@ -0,0 +1 @@
+# Endpoint authentication

src/data/best-practices/api-security/content/force-content-type.md

@@ -0,0 +1 @@
+# Force content type

src/data/best-practices/api-security/content/good-jwt-secret.md

@@ -0,0 +1 @@
+# Good jwt secret

src/data/best-practices/api-security/content/hsts-header.md

@@ -0,0 +1 @@
+# Hsts header

src/data/best-practices/api-security/content/index.md

@@ -0,0 +1 @@
+# 

src/data/best-practices/api-security/content/jwt-algorithm.md

@@ -0,0 +1 @@
+# Jwt algorithm

src/data/best-practices/api-security/content/jwt-payload.md

@@ -0,0 +1 @@
+# Jwt payload

src/data/best-practices/api-security/content/max-retry-jail.md

@@ -0,0 +1 @@
+# Max retry jail

src/data/best-practices/api-security/content/monitor-everything.md

@@ -0,0 +1 @@
+# Monitor everything

src/data/best-practices/api-security/content/no-sniff-header.md

@@ -0,0 +1 @@
+# No sniff header

src/data/best-practices/api-security/content/non-executable-stacks.md

@@ -0,0 +1 @@
+# Non executable stacks

src/data/best-practices/api-security/content/oauth-redirect-ui.md

@@ -0,0 +1 @@
+# Oauth redirect ui

src/data/best-practices/api-security/content/oauth-state.md

@@ -0,0 +1 @@
+# Oauth state

src/data/best-practices/api-security/content/oauth-validate-scope.md

@@ -0,0 +1 @@
+# Oauth validate scope

src/data/best-practices/api-security/content/only-server-side-encryption.md

@@ -0,0 +1 @@
+# Only server side encryption

src/data/best-practices/api-security/content/payload-size.md

@@ -0,0 +1 @@
+# Payload size

src/data/best-practices/api-security/content/prefer-uuid.md

@@ -0,0 +1 @@
+# Prefer uuid

src/data/best-practices/api-security/content/proper-http-methods.md

@@ -0,0 +1 @@
+# Proper http methods

src/data/best-practices/api-security/content/proper-response-code.md

@@ -0,0 +1 @@
+# Proper response code

src/data/best-practices/api-security/content/recommended-resources.md

@@ -0,0 +1 @@
+# Recommended resources

src/data/best-practices/api-security/content/remove-fingerprint-header.md

@@ -0,0 +1 @@
+# Remove fingerprint header

src/data/best-practices/api-security/content/response-type-token.md

@@ -0,0 +1 @@
+# Response type token

src/data/best-practices/api-security/content/restrict-private-apis.md

@@ -0,0 +1 @@
+# Restrict private apis

src/data/best-practices/api-security/content/rollback-deployments.md

@@ -0,0 +1 @@
+# Rollback deployments

src/data/best-practices/api-security/content/run-security-analysis.md

@@ -0,0 +1 @@
+# Run security analysis

src/data/best-practices/api-security/content/sensitive-data-encryption.md

@@ -0,0 +1 @@
+# Sensitive data encryption

src/data/best-practices/api-security/content/set-alerts.md

@@ -0,0 +1 @@
+# Set alerts

src/data/best-practices/api-security/content/throttle-requests.md

@@ -0,0 +1 @@
+# Throttle requests

src/data/best-practices/api-security/content/token-expiry.md

@@ -0,0 +1 @@
+# Token expiry

src/data/best-practices/api-security/content/unit-integration-tests.md

@@ -0,0 +1 @@
+# Unit integration tests

src/data/best-practices/api-security/content/use-https.md

@@ -0,0 +1 @@
+# Use https

src/data/best-practices/api-security/content/use-ids-ips-system.md

@@ -0,0 +1 @@
+# Use ids ips system

src/data/best-practices/api-security/content/use-standard-authentication.md

@@ -0,0 +1 @@
+# Use standard authentication

src/data/best-practices/api-security/content/validate-content-type.md

@@ -0,0 +1 @@
+# Validate content type

src/data/best-practices/api-security/content/validate-user-input.md

@@ -0,0 +1 @@
+# Validate user input

src/data/best-practices/api-security/content/x-frame-options-deny.md

@@ -0,0 +1 @@
+# X frame options deny