api-security authorization bola idor multi-tenant broken-access-control authentication appsec

webhook-security hmac-signature replay-attack idempotency distributed-systems api-security event-driven backend-security