We have a website and for which we have backend APIs. Now the issue is majority of our APIs are opened for non-logged in user(Functional Requirement).
Now what we want is to secure those APIs in terms that no one you should start crawling and get all the data. One obvious way is definitely bot detector. What are the other standard ways of doing this.