A small hands-on API security project demonstrating a Broken Access Control / IDOR-style vulnerability and its remediation using basic authentication and authorization checks in FastAPI.
This lab includes:
- a vulnerable API version
- a remediated API version
- curl-based security testing
- screenshots of authorization test results
This project is a personal learning lab created to demonstrate API security concepts such as Broken Access Control and authorization checks.
All data, users, and scenarios are simulated and do not represent any real system or organization.
The secure API was tested using curl commands to verify authentication and authorization controls.
