Preventing Broken Object Level Authorization (BOLA) in ASP.NET Core APIs

Broken Object Level Authorization — BOLA for short — sits at the top of the OWASP API Security Top 10 for good reason: it is the most exploited API vulnerability in production systems today. An authen