Advanced API Security: OAuth 2.0 and Beyond