Why Your .NET API Passed Testing but Still Failed Authorisation

The API passed functional testing. It passed user acceptance testing. It failed penetration testing within minutes.