Test API
===============

This is a list of resources used to build the API: 

 - API is described by [RAML](http://docs.raml.org/specs/1.0/#raml-10-spec-methods)
 - API is built on [Express.js](http://expressjs.com)
 - Configuration is managed by [Node-convict](https://github.com/mozilla/node-convict)
 - API Test are using [Mocha](https://mochajs.org) with assertions via [SuperTest](https://github.com/visionmedia/supertest)

Consider using:

  - [Amazon s3](https://aws.amazon.com/sdk-for-node-js/) for file storage. [Setup Article](https://aws.amazon.com/articles/1073express)
  - [NewRelic](http://newrelic.com) for monitoring
  - [nsp](https://nodesecurity.io/tools) to monitor dependency vulnerabilities
  - [node-raml-validate](https://github.com/mulesoft/node-raml-validate) to validate API requests and responses

Resources:

 - [Creating an API authenticated with Oauth 2 in Node.js](http://resources.infosecinstitute.com/securing-web-apis-part-ii-creating-an-api-authenticated-with-oauth-2-in-node-js/)
 - [The Ulitmate Guide to Mobile API Security](https://stormpath.com/blog/the-ultimate-guide-to-mobile-api-security/)