NodeJs,AngularJs,Sql Server,WebApi

Note: some times if any exception occurs in controller (failed to load specification) then need to check api with Postman because swagger can not show the specific exception details. What is Swagger? Swagger is an open source, human and machine readable API framework to design, build, and document.APIs. What this means is that Swagger defines an API’s RESTful contract, allowing all the API’s stakeholders,be it your development team, or your end consumers, to understand what the API does and interact with its various resources, without having to integrate it into their own application. Swagger is a language-agnostic specification for describing REST APIs. It allows both computers and humans to understand the capabilities of a service without any direct access to the implementation (source code, network access, documentation). One goal is to minimize the amount of work needed to connect disassociated services. Another goal is to reduce the amount of time needed to accurately ...

Reference url:https://www.guru99.com/comparison-between-web-services.html

Web API Security 1. Working with SSL in Web API (HTTPS): SSL   (Secure Sockets Layer) is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and integral. SSL Client Certificates : SSL provides authentication by using Public Key Infrastructure certificates. The server must provide a certificate that authenticates the server to the client. It is less common for the client to provide a certificate to the server, but this is one option for authenticating clients. To use client certificates with SSL, you need a way to distribute signed certificates to your users. Advantages Disadvantages - Certificate credentials are stronger than username/password. - SSL provides a complete secure channel, with authentication, message integrity, and message encryption. ...