Ce que c’est…
https://app.pluralsight.com/library/courses/designing-restful-web-apis/table-of-contents
https://dzone.com/articles/top-10-api-security-threats-every-api-team-should
Attaques
- https://www.lemondeinformatique.fr/actualites/lire-les-api-cible-des-tentatives-d-authentification-dans-les-services-financiers-78174.html
- https://threatpost.com/akamai-on-credential-stuffing-attacks/153654/
Ressources
A voir : problématiques de sécurisation d’API OIDC, OAuth2
https://blog.octo.com/designer-une-api-rest/
https://www.octo.com/publications/29-api-security-principles/
https://www.securityweek.com/grammatech-releases-open-source-api-security-tool
