[Root-Me] API - Broken Access

Swagger REST API:

Enumerating user IDs on /api/user: /1, /2, /3, /4, /5…

FLAG : RM{E4sy_1d0r_0n_API}