> For the complete documentation index, see [llms.txt](https://gowsundar.gitbook.io/book-of-bugbounty-tips/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://gowsundar.gitbook.io/book-of-bugbounty-tips/authentication-authorization.md).

# Authentication / Authorization

* [How to bypass access authorization authentication using the OPTIONS method](https://twitter.com/jae_hak99/status/1290618836165697537?s=20)

  [GET /instructor/performance/students/?course\_id=497558 HTTP/1.1 : 403 Forbidden](https://twitter.com/jae_hak99/status/1290618836165697537?s=20)

  [OPTIONS /instructor/performance/students/?course\_id=497558 HTTP/1.1 : 200 OK](https://twitter.com/jae_hak99/status/1290618836165697537?s=20)
*