Yes, security is a hugely important issue when working with APIs. There are things I would do differently in future - especially with API keys. I learned a lot while working on this first project, but data security is something I'm planning to do a course on in future.
Wojtek X
js
APIs are useful yet risky, so not secure at all!
Design your API badly and you open your infrastructure to the world.