Broken Object Level Authorization: API security’s worst enemy

The content of this post is solely the responsibility of the author.  AT&T does not adopt or endorse any of the views, positions, or information provided by the author in this article. ​

According to the Open Web Application Security Project (OWASP, 2019), broken object-level authorization (BOLA) is the most significant vulnerability confronting modern application programming interfaces (APIs). It can be exciting to pursue innovations in the API area, but while doing so, programmers must ensure that they …

amp api apis api security application application security area article author authorization bola broken object level authorization doing exciting information object open web open web application security project owasp programming project responsibility security vulnerability web web application web application security