API Security (REST & GraphQL)

OWASP API Top 10, authn/authz patterns, rate-limit, schema protection.