2 docs tagged with "oauth"

Chapter 15: Designing an Authentication and Authorization System — Passwords, Sessions, MFA, and Audit Logs

This chapter covers, for junior engineers and from a database-design angle, the difference between authentication and authorization, password hashing (bcrypt/argon2), session management, multi-factor authentication (MFA / TOTP), account lockout (OWASP/NIST compliant), and audit logs.

Chapter 16: OAuth and OpenID Connect — Authentication Integration With External Services

This chapter covers, for junior engineers, OAuth 2.0's four roles, Authorization Code Flow + PKCE, OpenID Connect's ID Token (JWT), the modern standard following Implicit Flow's deprecation under RFC 9700, and DB design for social login.