Authentication is a cornerstone capability of any application. Ensuring a user is who they say they are is crucial to maintaining data privacy and preventing fraud and data breaches. Consequently, improperly implemented authentication, known as broken authentication, is a potentially devastating application vulnerability. In fact, the Open Web Application Security Project (OWASP) lists broken authentication as the second most critical security risk to web applications.
This whitepaper will provide an overview of broken authentication: why it’s so dangerous, the types of threats that can take advantage of this vulnerability, and how Auth0 prevents broken authentication.
