News for hackers. Stuff that matters.
Re:Ask HN: Rest api authorization by atmosx on Saturday October 15, 2016 @05:59PM (#12715837)
HMAC for auth to avoid having the key exposed at every request.

For the rest: http://www.javabeat.net/rest-api-best-practices/

And documentation: https://github.com/Rebilly/ReDoc/blob/master/README.md

There many more comprehensive resources about sane API design (use HATEOAS, pagination, etc.) but you don't have to implement everything from v1

ps. SSL goes without saying even if it's a public API

There are no comments on this comment yet.