A BIG LOOK AT SECURITY IN OPENAPI

Summary from the TLDR InfoSec newsletter

This blog post discusses security options in OpenAPI and what companies are doing regarding API security. Large companies like Facebook and Github use OAuth2 for API security. The document recommends using OAuth2 for authentication but acknowledges that it can be complex. API keys are still commonly used for security in smaller APIs. Basic authentication is not recommended due to its insecurity.