Skip to main content

Authentication & Authorization Framework

 Authentication - Who the user is (Valid Identity)

  1.  Basic Auth Methods
    • Basic - Auth in requset header (Authorization - Basic<base64 encoded credential>
    • Digest
    • API Keys - API Key (unique key for each client through header) (Authorization: ApiKey abc123xyz
                                        or X-API-Key: abc12345xredt 
                    APiKeys are stored in db with hash
    • Session
      • web approach - session storage - user logs in with credentials



2. Token Based Auth
    • Bearer & JWT Tokens
    • Access & Refresh Tokens
3. OAuth2 and OIDC
    • OAuth2
    • OpenId Connect
4. SSo & Identity Protocols
    • SSO (SAML, OIDC, OAuth2)


 

Comments

Post a Comment

Popular posts from this blog

API Basics

 
Post a Comment
Read more

Algorithm solving Common Patterns & Techniques

  These are targeted data manipulation strategies used to handle arrays, strings, and linked lists efficiently. Two Pointers : Uses two reference pointers to iterate through a data structure simultaneously, typically from opposite ends or at different speeds (Fast & Slow pointers). Sliding Window : Maintains a subset of data (a "window") over a sequential structure to track running statistics without recalculating the whole set. Prefix Sum : Pre-computes and stores cumulative sums of an array to allow for \(O(1)\) constant-time range sum queries. Dynamic Programming (DP ): Dynamic programming is an optimization technique used to solve problems by breaking them down into simpler subproblems and storing the results of these subproblems to avoid redundant computations. It is particularly effective for problems exhibiting overlapping subproblems and optimal substructure. Greedy Algorithm Breadth-First Search (BFS) / Depth-First Search (DFS) : Systematic graph and tree travers...
Post a Comment
Read more