# Identity & Authentication

Broken authentication is consistently in the OWASP Top 10. We cover identity platforms, session management, and auth bypass techniques — including Cognito and Google Identity Platform.

1 article

### [Exploiting weak configurations in Google Identity Platform](/content/blog/exploiting-weak-configurations-in-google-identity-platform/index.html)

How misconfigured Google Cloud Identity Platform (Firebase) applications can leak API keys and auth tokens, allowing unauthenticated users to query, modify, or delete backend identity data.

Appsecco · April 14, 2021 · 6 min