      body: JSON.stringify({
        ...keys,
        _method: 'POST',
        username: 'someemail@somedomain.com',
        password: 'somepassword',
        email: 'someemail@somedomain.com',
      }),
    });
    this.objectId = signUpResponse.data.objectId;
    this.sessionToken = signUpResponse.data.sessionToken;
    this.partialSessionToken = this.sessionToken.slice(0, 3);
  });
The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.