title: How to prevent SQL injection and improve security on REST APIs?
body: <p>I'm new into REST APIs and developing an API that is going to be used for iOS/Android/Web apps, but I'm unfamiliar with the kind of threats the APIs face once published.
  I see these same tips all over:</p>
  <ul>
  <li>Use oAuth 2 to allow transactions,</li>
  <li>Receiving and sending only encrypted JSON Web Tokens,</li>
  <li>Use SSL/TTL.</li>
  </ul>
  <p>I think using SSL/TLS and JWT should be enough security for sending/receiving data, but even with that, I fear the possibility of SQL injection if someone stole credentials.</p>
  <p>Should I check the requests for SQL injection strings (<a href="https://github.com/danTaler/detectionString/blob/master/SQL-Injection" rel="nofollow noreferrer">such as this one</a>)?
  And if I'm going to support user login, would it make more sense to use oAuth instead of JWT?</p>