I would like to ask an architect based questionWhat  is more secure and most standard way to follow.For let's say a mobile application,Should the Api for mobile interaction with server be different than CMS (cms to use its own database queries AND functions) or should cms and app use same api integrated inside CMS.
Api for CMS And Mobile applications either separate or same
api;android;ios;api design;cms