Broken Authentication

API broken authentication appears when an API cannot reliably prove who the caller is or cannot safely manage credentials, tokens, and sessions.