owaspAuthInsecureSchemes

owaspAuthInsecureSchemes checks HTTP authentication schemes for outdated choices such as negotiate and OAuth v1.

Use owaspOAuthFlow to check OAuth password or implicit flows.

Example ruleset configuration

my-security-rule:
  description: Check for insecure HTTP authentication schemes.
  type: validation
  given: $
  then:
    function: owaspAuthInsecureSchemes

Used by the following rules:

• owasp-auth-insecure-schemes