Ask HN: Best practice to secure an API?

1 pointtixocloud5 comments

Hi folks,

Wondering if there are any security experts on HN who can guide me on securing an API (on Django REST)? What’s the best way and what are some things I need to consider in terms of ease of use vs complexity?

Thanks in advance!

View on HN

Secure it how? What are you trying to secure about it? Who or what is using the api? What level of security do you need? I recommend you Duck "Django rest api security".

In general, control who accesses the API and prevent from being hacked or manipulated. Worried that credentials/private information are stolen as well. Basically we do identity verification so as secure as possible without over complicating things?

Wonder if JSON Web Tokens with OAuth is enough or is 2FA the way to go for max security.

Hey do you have an @ I can pm you at?

Email is in my profile.

im sorry but im not seeing it, is it your handle@gmail?

Reply on news.ycombinator.com