How to secure my API, if I want to use it on a different server

Hi,

I already had a similar topic someone time ago (How to use Security Provider with a Server Connect Action from another site)

Brian helped me a lot with this. After reading the following article https://restfulapi.net/security-essentials/ I think I should do more to secure my API.

@George, @Teodor, @patrick what do you recommend how to secure an API if there is no possibility to use sessions?

Thanks a lot for your help.

Marcel