How to protect your API from developers who knows your API?

I'm a fullstack developer trainee in a company. I'm working on Online book store project. My manager asked a question.

He asked "If someone i.e other developer knows your code or API they can change the code or API in your project and adds themself as an admin or can remove some user from the DB and also performs CRUD operations by changing your API. So how can you solve this?".

My suggestion: Rather than having codes in the local machine we can put our code in some server.

plz suggest your opinion and correct answer.

https://stackoverflow.com/questions/66450211/how-to-protect-your-api-from-developers-who-knows-your-api March 03, 2021 at 11:08AM