Web application penetration test of a single-page application to manage contracts and invoices. Application interacted with a SAP backend via an API.