secure-api-implementation