API Authentication & Authorization
OAuth 2.0 flows, JWT structure and validation, API keys, mTLS, OIDC, token introspection, and Spring Security integration.
4 docs tagged with "oidc"
View all tagsAuthentication & Authorization
Deep dive into authentication and authorization patterns including sessions, JWT, OAuth 2.0, OIDC, RBAC, ABAC, MFA, passwordless, passkeys, and Spring Security implementation.
Identity & Access Management (IAM)
SSO, federated identity, directory services, service accounts, PAM, just-in-time access, and cloud IAM best practices for AWS and Kubernetes — for Java/Spring engineers.
JWT, OAuth 2.1 & OpenID Connect (OIDC) — Principal Architecture Deep Dive
Under-the-hood engineering guide to JOSE (JWS/JWE/JWKS), OAuth 2.0 vs OAuth 2.1, PKCE S256 cryptography, OpenID Connect ID Token mechanics, Phantom Token pattern, DPoP (RFC 9449), Token Exchange (RFC 8693), and Senior/Staff interview playbooks.