REST

REST is the architectural style behind most web APIs: resources addressed by URLs, standard HTTP verbs like GET and POST, and stateless requests. When someone says they have an API, they usually mean a REST API returning JSON. The API surface is the modern attack surface, and the OWASP API Security Top 10 exists precisely because broken authorization on REST endpoints became one of the most common ways data leaks.