# APIS

### Designing An API

How to ensure your open api is secures

[https://softwareengineering.stackexchange.com/questions/219028/how-to-safeguard-a-rest-api-for-only-trusted-mobile-applications](https://softwareengineering.stackexchange.com/questions/219028/how-to-safeguard-a-rest-api-for-only-trusted-mobile-applications)

## Oauth

Implicit Flow just has one less step so easier, but less secure or something. Doing a get request with access\_token lets anyone who can see your history or url gets have it which is less secure than the regular oauth post request.
