How to secure REST APIs in Node.js

I’m working on a Node.js Express app and want to protect my API routes. What are the recommended security steps?

Use JWT for authentication, apply rate-limiting with "express-rate-limit", and sanitize inputs to prevent injection.

Enable HTTPS, validate all inputs and avoid exposing sensitive data in error messages.