Authentication
Establishing who is calling.
2 subjects · 3 topics
Subjects covering this category
2 subjects- Subject · Beginner to Advanced
Designing HTTP APIs that clients can understand, call safely, and keep using as the API changes.
- HTTP for API Designers
- Designing the Contract
- Repeats, Retries and Long Jobs
- Subject · Beginner to Advanced
Turning a product's requirements into a first design for a web system, and knowing what each part is there for.
- Starting a Design
- The Parts of a System
- Moving Data Around
In Authentication itself
3 topics- API Design
Authenticating API clients: API keys, sessions, bearer tokens, JWTs and mutual TLS, and which one suits each kind of caller.
Beginner to Advanced12 cards · 8 qnot started
- API Design
OAuth 2.0 and OpenID Connect: letting an application act for a user without their password, and learning who that user is.
Beginner to Advanced11 cards · 7 qnot started
- System Design
Scaling a web system up or out: bigger machines or more of them, what has to be stateless first, and what autoscaling cannot catch.
Beginner to Advanced9 cards · 5 qnot started