Essential session storage is required to sign in. Optional analytics remain off unless you allow them.
Turn the path into reviewable evidence with its scoped project milestones and explicit grading criteria.
Design and build a small REST API spec-first: write the OpenAPI document for a resource (collection + item, correct methods and precise status codes,...
Build an API that survives real-world clients: idempotency keys on the create endpoint (a retried POST returns the original result with no duplicate),...
Build an API with real authentication/authorization and prove it: OAuth2/JWT or scoped API keys, per-object ownership checks on every resource access,...