I need to jot down debugging steps for below scenario : "You are hosting a web app in your server which is accessible only to a particular set of people. But on an unusual day, all the people are able to access your web app. How would you troubleshoot this issue?"
I can make some assumptions for example : 1. Auth API might be down. 2. Auth API returning incorrect response for unauthorized users. 3. Web app not maintaining session based on auth API response.
What all other debugging steps should we perform on this scenario ?