Authorization

Explore recommended reads, summarized by AI

Authentication Protocols and Standards

Writing about the protocols and standards that enable secure authentication and authorization across applications.

OAuth and OpenID Connect

Framework Implementation

Technical guides to building authentication and authorization systems in specific programming languages and frameworks.

Web Framework Authentication

Popular this week

The new control plane

Rory Braybrook

Using a .NET .http file to do an authentication code flow in Entra External ID (EEID)

Nov 2

Gehad Reda

HTTP 401 vs 403 vs 404 vs 405 — And Advanced Techniques to Bypass Unauthorized Pages

Jun 1

Towards Dev

Mr Madhukar

How Authentication and Authorization Work

5d ago

Priyabrata

Hub-and-Spoke Federation: A Simpler Way to Scale B2B Identity

Oct 11

Robert Broeckelmann

OPA and Rego — Because Apparently Everything Needs a Policy

Oct 5

Latest stories

Dushyanth V

Proving Policy Properties with Cedar’s Symbolic Compiler

1d ago

Prasun kumar

Understanding Authorization in Spring Security: Authorities, Roles, and Authorization Events

1d ago

Mithun Manohar

Federate Identity, Not Permissions: A Mental Model for Secure Cross-Cloud Access

2d ago

Yathusiga Kirubananthan

One Authorization Standard, Two Roles: AuthZEN in ThunderID

4d ago

Towards Dev

Mr Madhukar

How Authentication and Authorization Work

5d ago

See more stories

Authorization

Authentication Protocols and Standards

OAuth and OpenID Connect

Framework Implementation

Web Framework Authentication

Popular this week

Using a .NET .http file to do an authentication code flow in Entra External ID (EEID)

HTTP 401 vs 403 vs 404 vs 405 — And Advanced Techniques to Bypass Unauthorized Pages

How Authentication and Authorization Work

Hub-and-Spoke Federation: A Simpler Way to Scale B2B Identity

OPA and Rego — Because Apparently Everything Needs a Policy

Latest stories

Proving Policy Properties with Cedar’s Symbolic Compiler

Understanding Authorization in Spring Security: Authorities, Roles, and Authorization Events

Federate Identity, Not Permissions: A Mental Model for Secure Cross-Cloud Access

One Authorization Standard, Two Roles: AuthZEN in ThunderID

How Authentication and Authorization Work

Who to follow

Popular this week

Using a .NET .http file to do an authentication code flow in Entra External ID (EEID)

HTTP 401 vs 403 vs 404 vs 405 — And Advanced Techniques to Bypass Unauthorized Pages

How Authentication and Authorization Work

Hub-and-Spoke Federation: A Simpler Way to Scale B2B Identity

OPA and Rego — Because Apparently Everything Needs a Policy

Latest stories

Proving Policy Properties with Cedar’s Symbolic Compiler

Understanding Authorization in Spring Security: Authorities, Roles, and Authorization Events

Federate Identity, Not Permissions: A Mental Model for Secure Cross-Cloud Access

One Authorization Standard, Two Roles: AuthZEN in ThunderID

How Authentication and Authorization Work

Who to follow