OWASPASVS 5.0 requirement

ASVS-V4.4.3 Verify that, if the application's standard session management cannot be used, dedicated tokens are being used for this, which comply with…

L2 Published 2025 Official page ↗

Standard: OWASP ASVS 5.0
Chapter: V4 API and Web Service
Section: V4.4 WebSocket
Level: L2 (requirement applies from this verification level up)

Requirement

Verify that, if the application's standard session management cannot be used, dedicated tokens are being used for this, which comply with the relevant Session Management security requirements.