WebApi Asp.net Core

We need to expose 2-3 Api so that our clients can consume. The business logic that will be executed in the API call will be supplied. I need to security aspect of the API integration. Basically how will the client securely call our API and how will we properly secure the api. I'm looking for best practices, proper documentation & testing ; database is SQL server. Before selection expect some discussions regarding the proposed solution