Much like the first wave of content including GraphQL as a module, there should more than likely be one for REST API security / best practices.

I think before moving on this we should compile a list of reputable resources to build lessons around.

Relevant Resources:

• https://www.invicti.com/blog/web-security/rest-api-web-service-security/
• https://restfulapi.net/security-essentials/
• https://stackoverflow.blog/2021/10/06/best-practices-for-authentication-and-authorization-for-rest-apis/