API Security in Action

This is a Great book for API Security. It has covered almost every aspects of API security including OAuth2.0 and OIDC

very nicely written

It's well laid out and easy to get to the subject matter that fills in blank spaces in my knowledge of the subject.

wonderful detailed information for anyone looking to unlock and understanding modern day api

I have to admit that read a lot from Manning publisher and I enjoy "In Action" series.Security In Action is one of the best "in Action" books I ever read. What I enjoy is very good approach from author and his teaching skills. He introduces in phases, step by step such important topic as API security.On one hand learning curve is not so steep on the other hand book is not made with fluff.It makes a good reading and, don't let you get bored on the other hand details are presented step by step. For e.g let started with Basic Authorization, then explain what are downturns and pitfalls. And then slowly chapter by chapter how to properly make your API secure and robust. I enjoyed also real and well described examples of attacks. This is huge improvement over numerous security trainings which I passed at different major IT companies.What I enjoyed as well small quizzes in every chapter which helps to verify if a reader really comprehend knowledge.In code examples he uses Spark Java project which seems to be perfect suited to microservices but not only. I plan to leverage this lightweight approach soon in practice in my daily job.I could write more but it would be only positives, highly recommended for all Java Devs.

This book covers API security from the ground up in a linear way. The text is clear and precise and the example project (which gets built throughout the book) is easy to follow but also not too simple to be contrived.The author goes over many topics related to API security, presenting different approaches and discusses their benefits and drawbacks always with examples. I appreciated that the examples are always a part of the main project and are not standalone. This helped me to see where they fit and solidified my understanding.