M6: 2016 - Insecure Authorization

• OWASP Documentation

Actions by GeneXus

• If the application uses GeneXus Access Manager (GAM) (it should), automatically verifies the session on every REST endpoint using OAUTH 2
• GeneXus Access Manager also allows the developer to configure security policies (password complexity, login intents, etc).

Actions by Developers

• Configure accordingly the security policies for the production environment.