Auth Middleware Bug
medium~30 min
An admin-only route was accidentally left reachable by unauthenticated users. Explain a likely cause of this kind of bug, and how you'd prevent it from happening again.
Solution
This one has no written solution — the answer is your own story or your own submission.