18.6 Session based authentication and authorization is usedΒΆ

Verify the use of session-based authentication and authorization. Please refer to sections 2, 3 and 4 for further guidance. Avoid the use of static “API keys” and similar.

Levels: 1, 2, 3