M6: 2016 - Insecure Authorization

• OWASP Documentation

Actions by GeneXus

• If the application uses GAM (it should) the GeneXus Access Manager automatically verifies the session on every REST endpoint using OAUTH 2
• GAM also allows the developer to configure security policies (password complexity, login intents, etc).

Actions by Developers

• Configure accordingly the security policies for de production environment.