OWASP API #2 — Broken Authentication: When APIs Forget to Verify Who You Are

Imagine you arrive at an airport. Instead of checking your passport, the security officer simply asks: