The API Security Mistakes Developers Make Without Realizing It

There's an enormous amount of security content out there telling developers to use HTTPS, validate input, and don't store passwords in plaintext. All true. All important. And also... kind of the basel