API authentication is a process of verifying the identity of a user or process on an API. Authentication can be one-way or two-way, depending on what information you are seeking to validate. One-way authentication only authenticates the requestor's identity, while two-way authentication authenticates both the requestor and the server. It’s important to remember that APIs are shared resources, which require this type of security in order to prevent unauthorized access.