[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-573797-105":53,"doc-detail-573797-en":125},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":118,"head_meta":120,"extra_data":122,"updated_unix":124},105,"en","securing-your-api-the-owasp-top-10","Securing Your API - The OWASP Top 10","","This presentation, titled 'Securing Your API - The OWASP Top 10' by Rob Allen, provides a critical overview of modern API security challenges. It emphasizes the significant threat landscape, noting that 57% of organizations have experienced API-related data breaches in recent years. The document serves as a technical resource for developers and security professionals, focusing specifically on the OWASP API Security Top 10 list. A major emphasis is placed on Broken Authentication, explaining how insecure verification mechanisms, such as weak or absent token validation and credential stuffing attacks, compromise system integrity. By dissecting specific vulnerabilities like unverified JWT signatures, the presentation offers actionable insights into protecting authentication and authorization processes. The content is designed to elevate awareness and provide foundational knowledge for building more resilient, secure, and compliant API architectures in professional development environments.",{"@graph":63,"@context":117},[64,80,100],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":11,"@type":70,"position":76},"https://docshare.wps.com/template/presentations/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/securing-your-api-the-owasp-top-10/573797/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":94,"encodingFormat":93,"isAccessibleForFree":95,"interactionStatistic":96},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/securing-your-api-the-owasp-top-10/573797.png","ImageObject",442,249,{"name":88,"@type":89},"Jordan Avery","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-14",true,{"@type":97,"interactionType":98,"userInteractionCount":9},"InteractionCounter",{"@type":99},"ViewAction",{"@type":101,"mainEntity":102},"FAQPage",[103,109,113],{"name":104,"@type":105,"acceptedAnswer":106},"What does the Traceable 2025 Global State of API Security report indicate about data breaches?","Question",{"text":107,"@type":108},"The report indicates that 57% of organizations have suffered an API-related data breach within the past two years.","Answer",{"name":110,"@type":105,"acceptedAnswer":111},"What is the primary focus of the OWASP API Security Project?",{"text":112,"@type":108},"The project seeks to provide value to software developers and security assessors by highlighting the potential risks associated with insecure APIs.",{"name":114,"@type":105,"acceptedAnswer":115},"What are common examples of Broken Authentication in APIs?",{"text":116,"@type":108},"Common vulnerabilities include weak or non-existent token validation, missing expiration dates on tokens, and susceptibility to credential stuffing attacks.","https://schema.org",{"og:url":78,"og:type":119,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":121,"canonical":78},"index,follow",{"doc_id":123,"site_id":56},573797,1792015950,{"code":4,"msg":5,"data":126},{"doc_id":123,"user_id":127,"nickname":88,"user_avatar":128,"doc_module":9,"category_id":8,"category_name":11,"doc_title":59,"doc_description":61,"doc_content":129,"file_id":130,"file_url":131,"file_type":132,"file_size":133,"view_count":9,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":134,"language":135,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":136,"faqs":137,"seo_title":138,"seo_description":61,"update_tm":139,"read_time":140},1099523882367,"https://ap-avatar.wpscdn.com/davatar_9964176cb1d06d4a9deccf72a44ae3dc","Securing Your APIThe OWASP Top 10Rob Allen,February 2026  \n57%of organizations suffered an API-relateddata breach in the past two years  \nTraceable 2025Global State of API Security report  \n# Why APIs are different?\n\nThe OWASPAPI Security Project seeks to provide value tosoftware developers and security assessors by underscoringthe potential risks in insecure APIs  \n# OWASP API Security Top 10\n\nRob Allen～akrabat.com  \nOWASP API Security Top 10  \nRob Allen～akrabat.com  \nWho are you andwhat can you access?  \nAuthentication and authorisation failures  \nRob Allen～akrabat.com  \n# Broken Authentication\n\nAPls that don't properly verify who you are  \n\\#1\\#2\\#3\\#4\\#6\\#7\\#8\\#9  \n\\#10  \nBroken Authentication  \n# APls that don't properly verify who you are\n\n● Weak/no token validation  \n● Missing expiration on tokens  \n● Credential stuffing attacks  \n\\#1\\#2\\#3\\#4\\#6\\#7\\#8\\#9  \n\\#10  \nBroken Authentication  \n\\#1\\#2\\#3\\#4\\#6\\#7\\#8\\#9  \nAPls that don't properly verify who you are  \n● Weak/no token validation  \n● Missing expiration on tokens  \n● Credential stuffing attacks  \n\\#10  \nExample:APl accepts JWT without verifying the signature","cbCaiqeyeLYWEzg3","https://ap.wps.com/l/cbCaiqeyeLYWEzg3","pdf",12132557,67,"English","# Why APIs are different?\n# OWASP API Security Top 10\n## Broken Authentication","[{\"question\":\"What does the Traceable 2025 Global State of API Security report indicate about data breaches?\",\"answer\":\"The report indicates that 57% of organizations have suffered an API-related data breach within the past two years.\"},{\"question\":\"What is the primary focus of the OWASP API Security Project?\",\"answer\":\"The project seeks to provide value to software developers and security assessors by highlighting the potential risks associated with insecure APIs.\"},{\"question\":\"What are common examples of Broken Authentication in APIs?\",\"answer\":\"Common vulnerabilities include weak or non-existent token validation, missing expiration dates on tokens, and susceptibility to credential stuffing attacks.\"}]","Securing Your API - The OWASP Top 10 | PDF",1791946389,23]