Broken Object Level Authorization in REST APIs
Most APIs skip the ownership check that prevents users from accessing each other's data.
Selin Nakamura
Staff Writer
Selin Nakamura is a staff writer at Action Authorization Report covering authorization. Based in Stockholm, Selin has written for Action Authorization Report since 2016.
1 story · Stockholm
Most APIs skip the ownership check that prevents users from accessing each other's data.