Since we have looked at problems in our current code and how we will be implementing security in some of our endpoints and use authentication middleware, now it is the time to see what the common security threats that we need to consider while building RESTful web services are.
Common security threats in RESTful web services
Use of HTTPS
HTTPS is HTTP with SSL. As our data is being transferred over the internet, we need to make our connection secure; for that reason, we should use HTTPS. The purpose of HTTPS is to make sure that the server is who it claims to be and that data is transferred between the client and server with a secure connection in an encrypted form.
If you don't want to buy an SSL certificate as it is...