#TIL that API security guidelines suggest you should return a JSON object instead of a JSON array. #ruby