Portswigger Academy : https://portswigger.net/web-security/api-testing