tags oauth security Full list of security recommendation [[oauth-roles#API Resource|API Resource]] can be found here