---
title: "API security, errors and logging · vuejs.school"
description: "Map the OWASP API Security Top 10 onto Nuxt server routes, accept only the fields a person may change, fail closed when a check breaks, answer without internal details, and log security events without secrets."
canonical_url: "https://vuejs.school/learn/security/api-security-error-handling-and-ai"
meta:
  "og:description": "Map the OWASP API Security Top 10 onto Nuxt server routes, accept only the fields a person may change, fail closed when a check breaks, answer without internal details, and log security events without secrets."
  "og:image": "https://vuejs.school/_og/d/a_~QVBJIHNlY3VyaXR5LCBlcnJvcnMgYW5kIGxvZ2dpbmcgwrcgdnVlanMuc2Nob29s%2Cc_OgCard.takumi%2Ctitle_~QVBJIHNlY3VyaXR5LCBlcnJvcnMgYW5kIGxvZ2dpbmc%2Cdescription_~TWFwIHRoZSBPV0FTUCBBUEkgU2VjdXJpdHkgVG9wIDEwIG9udG8gTnV4dCBzZXJ2ZXIgcm91dGVzLCBhY2NlcHQgb25seSB0aGUgZmllbGRzIGEgcGVyc29uIG1heSBjaGFuZ2UsIGZhaWwgY2xvc2VkIHdoZW4gYSBjaGVjayBicmVha3MsIGFuc3dlciB3aXRob3V0IGludGVybmFsIGRldGFpbHMsIGFuZCBsb2cgc2VjdXJpdHkgZXZlbnRzIHdpdGhvdXQgc2VjcmV0cy4%2Ceyebrow_~U2VjdXJpdHkgJiBPV0FTUCDCtyBMZXNzb24gNyBvZiA3%2Ctint_lilac%2Cp_Ii9sZWFybi9zZWN1cml0eS9hcGktc2VjdXJpdHktZXJyb3ItaGFuZGxpbmctYW5kLWFpIg%2Cs_d2m_Dzvtw2O6tSOk.png"
  "og:image:alt": "API security, errors and logging · vuejs.school"
  "og:image:height": "600"
  "og:image:type": image/png
  "og:image:width": "1200"
  "og:title": "API security, errors and logging · vuejs.school"
  "twitter:image": "https://vuejs.school/_og/d/a_~QVBJIHNlY3VyaXR5LCBlcnJvcnMgYW5kIGxvZ2dpbmcgwrcgdnVlanMuc2Nob29s%2Cc_OgCard.takumi%2Ctitle_~QVBJIHNlY3VyaXR5LCBlcnJvcnMgYW5kIGxvZ2dpbmc%2Cdescription_~TWFwIHRoZSBPV0FTUCBBUEkgU2VjdXJpdHkgVG9wIDEwIG9udG8gTnV4dCBzZXJ2ZXIgcm91dGVzLCBhY2NlcHQgb25seSB0aGUgZmllbGRzIGEgcGVyc29uIG1heSBjaGFuZ2UsIGZhaWwgY2xvc2VkIHdoZW4gYSBjaGVjayBicmVha3MsIGFuc3dlciB3aXRob3V0IGludGVybmFsIGRldGFpbHMsIGFuZCBsb2cgc2VjdXJpdHkgZXZlbnRzIHdpdGhvdXQgc2VjcmV0cy4%2Ceyebrow_~U2VjdXJpdHkgJiBPV0FTUCDCtyBMZXNzb24gNyBvZiA3%2Ctint_lilac%2Cp_Ii9sZWFybi9zZWN1cml0eS9hcGktc2VjdXJpdHktZXJyb3ItaGFuZGxpbmctYW5kLWFpIg%2Cs_d2m_Dzvtw2O6tSOk.png"
  "twitter:image:alt": "API security, errors and logging · vuejs.school"
---

> Index of every page on this site: [llms.txt](https://vuejs.school/llms.txt)

# **API security, errors and logging**

Map the OWASP API Security Top 10 onto Nuxt server routes, accept only the fields a person may change, fail closed when a check breaks, answer without internal details, and log security events without secrets.

```json
{"@context":"https://schema.org","@graph":[{"@id":"https://vuejs.school/#website","@type":"WebSite","description":"A free AI-instructed school for Vue.js. Short tutorials, runnable code and quizzes that adapt to you.","name":"vuejs.school","url":"https://vuejs.school/","publisher":{"@id":"https://vuejs.school/#identity"}},{"@id":"https://vuejs.school/learn/security/api-security-error-handling-and-ai#webpage","@type":"WebPage","description":"Map the OWASP API Security Top 10 onto Nuxt server routes, accept only the fields a person may change, fail closed when a check breaks, answer without internal details, and log security events without secrets.","name":"API security, errors and logging","url":"https://vuejs.school/learn/security/api-security-error-handling-and-ai","breadcrumb":{"@id":"https://vuejs.school/learn/security/api-security-error-handling-and-ai#breadcrumb"},"isPartOf":{"@id":"https://vuejs.school/#website"},"potentialAction":[{"@type":"ReadAction","target":["https://vuejs.school/learn/security/api-security-error-handling-and-ai"]}],"primaryImageOfPage":{"@id":"https://vuejs.school/#logo"}},{"@id":"https://vuejs.school/#identity","@type":"Organization","description":"A free AI-instructed school for Vue.js. Short tutorials, runnable code and quizzes that adapt to you.","name":"vuejs.school","url":"https://vuejs.school","logo":{"@id":"https://vuejs.school/#logo"}},{"@id":"https://vuejs.school/learn/security/api-security-error-handling-and-ai#article","description":"Map the OWASP API Security Top 10 onto Nuxt server routes, accept only the fields a person may change, fail closed when a check breaks, answer without internal details, and log security events without secrets.","headline":"API security, errors and logging","inLanguage":"en","isAccessibleForFree":true,"thumbnailUrl":"https://vuejs.school/_og/d/a_~QVBJIHNlY3VyaXR5LCBlcnJvcnMgYW5kIGxvZ2dpbmcgwrcgdnVlanMuc2Nob29s%2Cc_OgCard.takumi%2Ctitle_~QVBJIHNlY3VyaXR5LCBlcnJvcnMgYW5kIGxvZ2dpbmc%2Cdescription_~TWFwIHRoZSBPV0FTUCBBUEkgU2VjdXJpdHkgVG9wIDEwIG9udG8gTnV4dCBzZXJ2ZXIgcm91dGVzLCBhY2NlcHQgb25seSB0aGUgZmllbGRzIGEgcGVyc29uIG1heSBjaGFuZ2UsIGZhaWwgY2xvc2VkIHdoZW4gYSBjaGVjayBicmVha3MsIGFuc3dlciB3aXRob3V0IGludGVybmFsIGRldGFpbHMsIGFuZCBsb2cgc2VjdXJpdHkgZXZlbnRzIHdpdGhvdXQgc2VjcmV0cy4%2Ceyebrow_~U2VjdXJpdHkgJiBPV0FTUCDCtyBMZXNzb24gNyBvZiA3%2Ctint_lilac%2Cp_Ii9sZWFybi9zZWN1cml0eS9hcGktc2VjdXJpdHktZXJyb3ItaGFuZGxpbmctYW5kLWFpIg%2Cs_d2m_Dzvtw2O6tSOk.png","@type":["Article","TechArticle"],"articleSection":["Security"],"author":{"@id":"https://vuejs.school/#identity"},"image":{"@id":"https://vuejs.school/#/schema/image/1"},"isPartOf":{"@id":"https://vuejs.school/learn/security/api-security-error-handling-and-ai#webpage"},"keywords":["API Security Top 10","mass assignment",".strict()","fail closed","security logging"],"mainEntityOfPage":{"@id":"https://vuejs.school/learn/security/api-security-error-handling-and-ai#webpage"},"publisher":{"@id":"https://vuejs.school/#identity"}},{"@id":"https://vuejs.school/learn/security/api-security-error-handling-and-ai#breadcrumb","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","name":"Skill tree","item":"https://vuejs.school/track","position":1},{"@type":"ListItem","name":"Security & OWASP","item":"https://vuejs.school/track/security","position":2},{"@type":"ListItem","name":"API security, errors and logging","position":3}]},{"@id":"https://vuejs.school/#logo","@type":"ImageObject","caption":"vuejs.school","contentUrl":"https://vuejs.school/apple-touch-icon.png","inLanguage":"en","url":"https://vuejs.school/apple-touch-icon.png"},{"@id":"https://vuejs.school/#/schema/image/1","@type":"ImageObject","contentUrl":"https://vuejs.school/_og/d/a_~QVBJIHNlY3VyaXR5LCBlcnJvcnMgYW5kIGxvZ2dpbmcgwrcgdnVlanMuc2Nob29s%2Cc_OgCard.takumi%2Ctitle_~QVBJIHNlY3VyaXR5LCBlcnJvcnMgYW5kIGxvZ2dpbmc%2Cdescription_~TWFwIHRoZSBPV0FTUCBBUEkgU2VjdXJpdHkgVG9wIDEwIG9udG8gTnV4dCBzZXJ2ZXIgcm91dGVzLCBhY2NlcHQgb25seSB0aGUgZmllbGRzIGEgcGVyc29uIG1heSBjaGFuZ2UsIGZhaWwgY2xvc2VkIHdoZW4gYSBjaGVjayBicmVha3MsIGFuc3dlciB3aXRob3V0IGludGVybmFsIGRldGFpbHMsIGFuZCBsb2cgc2VjdXJpdHkgZXZlbnRzIHdpdGhvdXQgc2VjcmV0cy4%2Ceyebrow_~U2VjdXJpdHkgJiBPV0FTUCDCtyBMZXNzb24gNyBvZiA3%2Ctint_lilac%2Cp_Ii9sZWFybi9zZWN1cml0eS9hcGktc2VjdXJpdHktZXJyb3ItaGFuZGxpbmctYW5kLWFpIg%2Cs_d2m_Dzvtw2O6tSOk.png","inLanguage":"en","url":"https://vuejs.school/_og/d/a_~QVBJIHNlY3VyaXR5LCBlcnJvcnMgYW5kIGxvZ2dpbmcgwrcgdnVlanMuc2Nob29s%2Cc_OgCard.takumi%2Ctitle_~QVBJIHNlY3VyaXR5LCBlcnJvcnMgYW5kIGxvZ2dpbmc%2Cdescription_~TWFwIHRoZSBPV0FTUCBBUEkgU2VjdXJpdHkgVG9wIDEwIG9udG8gTnV4dCBzZXJ2ZXIgcm91dGVzLCBhY2NlcHQgb25seSB0aGUgZmllbGRzIGEgcGVyc29uIG1heSBjaGFuZ2UsIGZhaWwgY2xvc2VkIHdoZW4gYSBjaGVjayBicmVha3MsIGFuc3dlciB3aXRob3V0IGludGVybmFsIGRldGFpbHMsIGFuZCBsb2cgc2VjdXJpdHkgZXZlbnRzIHdpdGhvdXQgc2VjcmV0cy4%2Ceyebrow_~U2VjdXJpdHkgJiBPV0FTUCDCtyBMZXNzb24gNyBvZiA3%2Ctint_lilac%2Cp_Ii9sZWFybi9zZWN1cml0eS9hcGktc2VjdXJpdHktZXJyb3ItaGFuZGxpbmctYW5kLWFpIg%2Cs_d2m_Dzvtw2O6tSOk.png"}]}
```