Novigi interview question

How to secure REST APIs and OAuth?