Where could I find a good Resource for current best practise for web API security /u/SquiffyUnicorn Python Education

Hi- the title says it all.

I’m developing an API for a small scale exam platform with fastAPI and requests. Currently it’s all on a small LAN with only 10-20 clients planned with a local server (my laptop).

I’m looking to future-proof and move the server online- site not selected.

Clearly it’s not a good idea to do all this in plaintext over the internet, however I am only just starting in this area and I don’t know how to approach even the simple architecture for secure client-server comms.

Could anyone point me toward an up to date resource for this please!

Hi- the title says it all.

I’m developing an API for a small scale exam platform with fastAPI and requests. Currently it’s all on a small LAN with only 10-20 clients planned with a local server (my laptop).

I’m looking to future-proof and move the server online- site not selected.

Clearly it’s not a good idea to do all this in plaintext over the internet, however I am only just starting in this area and I don’t know how to approach even the simple architecture for secure client-server comms.

Could anyone point me toward an up to date resource for this please!