API Audit Drush Command
9 sites
Security covered
This module provides Drush commands to audit headless or decoupled API routes. It helps identify routes with open access, missing permission checks, and other security misconfigurations.
This module provides Drush commands for auditing Headless/Decoupled API routes. It helps identify routes with open access, missing access requirements, and potential security misconfigurations.
Features
- Drush command to list all API routes(Endpoint).
- Drush command to audit API route(Endpoint) access permissions.
Post-Installation
After installing this module, you will be able to run the Drush commands shipping with this module.
- drush api:route --help
- drush api:audit:permission --help
Additional Requirements
This module works with Drush 12/13. That saying your need to have Drush installed with your Drupal project.
Supporting this Module
You can support this module by reporting issues, suggestions or new features.