OWASPASVS 5.0 requirement
ASVS-V7.2.1 The application performs all session token verification using a trusted, backend service.
- Standard
- OWASP ASVS 5.0
- Chapter
- V7 Session Management
- Section
- V7.2 Fundamental Session Management Security
- Level
- L1 (requirement applies from this verification level up)
Requirement
Verify that the application performs all session token verification using a trusted, backend service.