Skip to content
Tag4 articles

API Security

Everything on CoreConcept tagged with API Security. Explore related tags below.

Related tags

Articles

HTTPS and a valid JWT only prove the front door locked. Many real API incidents happen after authentication succeeds: a user changes /orders/42 to /orders/99 an

Jul 7, 20266 min read
Read

A developer opens the console, sees a red "blocked by CORS policy" error on a fetch call, and assumes the request never reached the server. It often already did

Jul 21, 20267 min read
Read

A mobile app adds "Sign in with Provider," gets back a token, and calls it a login. OAuth 2.0 was never built to answer "who is this user" — it was built to ans

Jul 21, 20268 min read
Read

Calling the Gemini API from a Firebase Cloud Function looks like three lines of code — grab the API key, send a prompt, return the text — and that's exactly why

Aug 3, 20269 min read
Read

Want a curated collection instead? Topic hubs group the best content by subject.

Browse Topics