General Information

This security risk is concerned with the identification of a user's identity, authentication and session management. This includes the handling of a user's password via password policies and password hashing, and the usage of JSON Web Token and session cookies.

A07:2021