Web Api Additional security

Web Api: Used to provide data to third party as JSON format. or Used for Single Page Applications like using front end with (Angular,React,Vujs,..)

Security: we use authorization using  (Basic ,JWT,Token,..)

Additional Security:  We can make more security to our API by providing following .

                                      

                                   1.IP White Listing

                                   2.Number of request for an Action by limit 

                                   3.Add Idempotent Key

                                   4.Restrict Referrer HTTPS->HTTPS

                                   5.OWASP Testing