---
id: 3473
title: "Pesky Server Auth Issues We’ve Found"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/pesky-server-auth-issues-weve-found"
published_at: "2018-08-10T10:23:59Z"
tags: ["code-review", "web-security", "api-security", "authentication", "best-practices", "django"]
phying_url: "https://phying.com/item/3473"
lang: en
---

# Pesky Server Auth Issues We’ve Found

## Summary

Common backend API authentication pitfalls and how to avoid them: enforce auth consistently with decorators or middleware, and check authentication as early as possible in the request lifecycle.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2018-08-10T10:23:59Z
- **Original:** https://www.hackerone.com/blog/pesky-server-auth-issues-weve-found
- **Phying News:** https://phying.com/item/3473