#security

Articles tagged with #security

JWT: What's Actually Inside the Token
Series: System Design · APIs & Communication — Pillar 3 of 8 This pillar: 00 — Overview · 01 — API Design · 02 — REST APIs · 03 — Authentication vs Authorisation · 04 — Session vs Token Auth · 05 — OA
Dec 16, 20249 min read2
OAuth 2.0 & OpenID Connect: Delegated Access and Federated Identity
Systems Design # Post What it covers 00 APIs & Communication: How Services Talk to Each Other How services talk to each other shapes everything about a system. Nine concepts covering REST, WebSo
Dec 15, 202412 min read2
Session vs Token Authentication: Stateful vs Stateless Identity
Series: System Design · APIs & Communication — Pillar 3 of 8 This pillar: 00 — Overview · 01 — API Design · 02 — REST APIs · 03 — Authentication vs Authorisation · 04 — Session vs Token Auth · 05 — OA
Dec 14, 20245 min read2
Authentication vs Authorisation: Two Questions, Two Checks
Systems Design # Post What it covers 00 APIs & Communication: How Services Talk to Each Other How services talk to each other shapes everything about a system. Nine concepts covering REST, WebSo
Dec 13, 202411 min read2
TLS/SSL: How HTTPS Actually Works Under the Hood
Series: System Design · Networking & Protocols — Pillar 2 of 8 TLS/SSL: How HTTPS Actually Works Under the Hood Systems Design # Post What it covers 00 Networking & Protocols: How Bytes Actual
Dec 4, 20246 min read4
Shift Left: How to Make Security Every Engineer's Job Without Making It Nobody's Job
Shift Left: How to Make Security Every Engineer's Job Without Making It Nobody's Job Series: The Modern SDLC · Post 8 of 17 ← Post 7: CI Pipeline · Post 9: Infrastructure as Code → Security teams h
Nov 1, 202414 min read6