Security guide
Authentication: The Complete Guide
A plain-English guide to authentication and access — sessions, cookies, JSON Web Tokens (JWT), OAuth, OpenID Connect, API keys, role-based access control (RBAC), and refresh tokens. No hype.
8 lessons·≈ 1 hr read·Free, no account
- 01Sessions: How Servers Remember Who's Logged InBeginner·8 min
- 02Cookies: How Credentials Ride Along With RequestsBeginner·8 min
- 03JSON Web Tokens (JWT): Stateless AuthenticationIntermediate·9 min
- 04OAuth Explained: Delegated Access Without Sharing PasswordsIntermediate·9 min
- 05OpenID Connect: How 'Sign in with Google' WorksIntermediate·8 min
- 06API Keys: Authenticating Machines, Not PeopleBeginner·8 min
- 07Role-Based Access Control (RBAC): Permissions Through RolesIntermediate·8 min
- 08Refresh Tokens: Staying Logged In SecurelyIntermediate·8 min