Les Hazlewood 
API Security: A guide to building and securing APIs from the developer team at Okta [EPUB ebook] 

Learn how Transport Layer Security protects data in transit, the different kinds of DOS attacks and strategies to mitigate them, and some of the common pitfalls when trying to sanitize data. Also, you’ll pick up best practices for managing API credentials, the core differences between authentication and authorization, and the best ways to handle each. And finally, you’ll explore the role of API gateways.