Summary

José Haro Peralta organizes API security around moving it earlier: the design, build, and operate stages each get security work instead of leaving it to a review at the end. The book dissects the OWASP Top 10 API security risks and gives a chapter each to authentication and authorization flaws and to API configuration and management flaws, showing how an attacker exploits weak authentication, insufficient constraints, and a flawed architecture. From there it covers securing an API by design, implementing authorization and authentication, and building secure API infrastructure, with a separate chapter on the stricter requirements of financial-grade APIs. The closing chapters turn to running APIs: observability and monitoring for threat detection, and security testing. Case studies are drawn from e-commerce, ridesharing, and other high-visibility targets. Examples are in Python.

Target Readers

• Backend developers who want API security decided at design time rather than caught in a review at the end
• Engineers implementing or revisiting authentication and authorization, who want the common flaws named and demonstrated
• Teams running an API platform that needs monitoring and security testing in place, not just a hardened configuration

Colophon

Publisher

Shoeisha

ISBN

978-4-7981-9633-6

Published

Jul 2026

List price

¥4,950incl. taxMay differ from the actual selling price on Amazon