#oauth

1 articles

01 ·Security·★ MEMBER·14 min read Authentication and Authorization — From Passwords to OAuth and Passkeys "Who are you?" and "what are you allowed to do?" are two different questions. This piece builds up password storage, sessions and tokens, the four actors in OAuth, and why passkeys resist phishing — assuming nothing to start with.