Forget slideware and come see some cooking action. In this talk, we’ll start with an unsecured API. We’ll show you how to add security through the use of an API gateway, authentication through the use of an OAuth Authorization Server, and fine-grained access control through the use of a Policy Decision Point. We’ll walk attendees through the basic steps and show the results live. We’ll wrap up by talking about OWASP’s Top Ten API Threats and how our recipe mitigates though. Meatballs & Lingonberry not included.