The Backend Engineer’s Guide to Broken Object Level Authorization

BOLA is OWASP’s number one API risk. Your authentication middleware does not stop it. Here is the code pattern that does.