Check whether login, permissions, sessions, tokens, passwords, or secrets are handled unsafely. Use this whenever the user wants to review account security, role checks, whether users can access the wrong data, whether tokens or sessions are configured safely, or whether a project may leak keys or s
Check whether login, permissions, sessions, tokens, passwords, or secrets are handled unsafely. Use this whenever the user wants to review account security, role checks, whether users can access the wrong data, whether tokens or sessions are configured safely, or whether a project may leak keys or secrets, especially with login flows, session cookies, JWT auth, password reset, admin roles, or user