Resources
API-Security-Checklist
shieldfy/API-Security-Checklist
A checklist of essential API security countermeasures for designing, testing, and releasing secure APIs.
Topics
Related projects
API-Security2.4kThe OWASP API Security Top 10 project, documenting the most common API security risks and best practices for building, testing and defending APIs.
hydra17.7kA hardened, OpenID-certified OAuth 2.0 and OpenID Connect server focused on token issuance, client management, and login/consent flow orchestration.
jwt9.3kA Go implementation of JSON Web Tokens supporting parsing, validation, signing, and verification with HMAC, RSA, RSA-PSS, and ECDSA algorithms.
cli4.4kA command-line toolkit for building and automating PKI workflows, covering X.509 certificate management, JWT/JOSE, OAuth, SSH certificates, and TOTP.
express-rate-limit3.3kexpress-rate-limit is a rate-limiting middleware for the Express web server, limiting repeated requests by IP over a time window and supporting external stores and standard rate-limit headers.- fosite2.6kA security-first OAuth2 and OpenID Connect framework for Go that implements the core RFCs and authorization flows for integration into custom authentication services.