Requiring that all operational security meets the policy standards.
Operation Security
Rules
OpenAPI Operation Security Definitions Error
Each API operation needs a security definition referencing the central security scheme express for an OpenAPI
OpenAPI Operation Security Definitions Info
Each API operation needs a security definition referencing the central security scheme express for an OpenAPI
Strategies
Operations Must Be Useful and Consistent
Every API operation should do one thing and do it well. That is the Unix philosophy applied to APIs and it still holds up. When your operations follow common standards with consistent naming, clear...
API Authorization Is Properly Defined and Enforced
Authentication gets you in the door, but authorization determines what you can actually do once you are inside. I see a lot of APIs where this is fuzzy--roles are poorly defined, permissions are to...
API Authentication Is Standardized
Authentication is one of those building blocks where consistency matters more than almost anything else. OAuth, JWT, API keys with proper scopes--pick your standards and apply them uniformly. When ...