easy5 pts · first answer countsauthenticationaccess-control

Safe default for new API routes

Your team often forgets to add auth checks on new routes. Which design reduces this risk?

A.Add auth checks only to the routes that handle moneyB.Make every route require auth unless marked publicC.Rely on the frontend hiding links to admin pagesD.Ask testers to find unprotected routes after release

Discussion 0

Join free to post in the discussion.

Safe default for new API routes

Discussion 0

Related questions