Verb tampering

API-Key based authentication is a common method to protect an API.

Objective: Bypass the authentication enforced by the API Gateway and retrieve the flag.