Authentication and authorization ensure that only authorized users and systems can access API resources. Standards such as OAuth 2.0, OpenID Connect and JSON Web Tokens (JWT) are frequently used for API authentication.