MuhammedZohaib API Review
Focus
- route, resolver, and webhook authorization
- object scoping and tenant filters
- request validation and mass assignment
- response leakage and error behavior
- rate limiting and abuse resistance
- server-side fetch and callback verification
Output rule
Prioritize externally reachable issues and admin-facing paths first.