18.6 Session based authentication and authorization is usedΒΆ
Verify the use of session-based authentication and authorization. Please refer to sections 2, 3 and 4 for further guidance. Avoid the use of static “API keys” and similar.
Levels: 1, 2, 3