API Authentication & Authorization
OAuth 2.0 flows, JWT structure and validation, API keys, mTLS, OIDC, token introspection, and Spring Security integration.
5 docs tagged with "oauth2"
View all tagsAuthentication & Authorization
Deep dive into authentication and authorization patterns including sessions, JWT, OAuth 2.0, OIDC, RBAC, ABAC, MFA, passwordless, passkeys, and Spring Security implementation.
JWT, OAuth 2.1 & OpenID Connect (OIDC) — Principal Architecture Deep Dive
Under-the-hood engineering guide to JOSE (JWS/JWE/JWKS), OAuth 2.0 vs OAuth 2.1, PKCE S256 cryptography, OpenID Connect ID Token mechanics, Phantom Token pattern, DPoP (RFC 9449), Token Exchange (RFC 8693), and Senior/Staff interview playbooks.
Security Interview Questions — Master Reference
Comprehensive security interview question bank for Java/Spring engineers — covering authentication, JWT, JWKS, MLE, payload signing, TLS, web vulnerabilities, cryptography, network security, cloud security, and secure design.
Security Patterns
Security design patterns for distributed systems including authentication, authorization, JWT, OAuth 2.0, rate limiting, zero trust, secrets management, and OWASP top threats.