Уровень 0 · материалов: 5
Сюда входят документы, описывающие технические принципы и различие между протоколами авторизации и аутентификации, такими как OAuth и OpenID.
Общие признаки: стандарты авторизации и аутентификации, механизмы безопасности веб-приложений, потоки реализации (implementation flows), Single Sign-On (SSO)
Группа выше: Протоколы и реализация аутентификации
Смысл: The text explains the OAuth 2.0 protocol, detailing how it allows applications to access user data on other services securely. It distinguishes authorization from authentication and describes various implementation flows for different types of software.
A comprehensive technical guide explaining the OAuth 2.0 authorization protocol, its difference from OpenID, and its various implementation flows for developers.
Смысл: The main idea is to demystify the OAuth protocol by explaining its security logic through analogies, failure examples, and a step-by-step practical implementation in PHP, distinguishing it clearly from OpenID.
A developer-focused guide that explains how OAuth enables secure third-party API access without sharing user passwords, illustrated with PHP code and security analysis.
Смысл: The main idea is to demystify OpenID Connect by explaining its core mechanisms, different authentication flows, and its role in providing a standardized, secure way for applications to perform Single Sign-On (SSO) and identity verification.
An introductory guide explaining how OpenID Connect works, comparing its different authentication flows, and detailing how it secures user identity verification.
Смысл: The main idea of the text is to categorize and explain the technical implementation, pros, and cons of various web authentication strategies, ranging from simple passwords to complex federated identity protocols like SAML and OAuth 2.0, to help developers choose the right security model for their applications.
A detailed technical guide exploring password, certificate, OTP, access key, and token-based authentication protocols (SAML, OAuth, JWT) for web applications.
Смысл: The main idea is to educate developers on the diverse landscape of authentication strategies, moving from stateful sessions to stateless tokens, passwordless flows, and multi-factor security to help them choose the right tool for their specific architectural needs.
An overview of modern authentication techniques—including sessions, JWT, passwordless, SSO, and 2FA—and the distinction between authentication and authorization.