title: For android(requests) and API security, are both HTTPS and oauth2 necessary?
body: <p>Beginner here, I'm currently using an express http server but I'm wondering what the best practices are to ensure the safety of my requests and user info. </p>