OWASP API Security Top 10 2019 Checklist

general > improper-assets-management-version

Guidance

The purpose of an API host is unclear, and there are no explicit answers to the following questions:
- Which API version is running?

Message

API should have a version

Examples

valid

#%RAML 1.0
title: example api
version: 1.0.0

invalid

#%RAML 1.0
title: example api

Applies to WebAPI

Constraint

Type: Declarative Validation