This talk is given in French and Robin's slides are available here: https://docs.google.com/presentation/d/1TbBlW9srNVILVtIrEmJCs805vO4V9DK0/edit#slide=id.p1 The Security part of your API is not something that belongs to API Platform itself. Instead, the framework lets you rely on the Symfony Security integration, including Symfony's built-in authenticators and community bundles that build on top of it. Stateful VS stateless, Cookies VS Headers, Standard protocols VS home-made authentication flows... There's a lot of alternatives, which can make it very hard to find the right one. In this talk we will review all these possibilities to see how you should secure your API depending on your application and infrastructure. Last but not least, we will discover a novelty that will help solving this issue. _____________ More info: https://api-platform.com/con/2021/ Twitter: https://twitter.com/ApiPlatform Music credits: Passion stuff by Lux-Inspira