Skip to main content
Vibgrate Graph: over 24% fewer tokens, same results
Back to Tags

Authorization

9 items tagged with "authorization"

Filter by type:

Best Practices1

Best Practice

OAuth 2.0 and OpenID Connect

OAuth 2.0 delegates authorization via access tokens; OpenID Connect adds an identity layer for authentication. Together they secure API access and single sign-on.

Anti-Patterns1

Anti-Pattern

Trusting Client-Side Validation

Relying on browser or app-side checks as the security boundary, when any client can be bypassed and send arbitrary requests directly to the server.

Tutorials2

Tutorial

Implementing OAuth 2.0 Authentication

Add OAuth 2.0 authentication to your application

Tutorial

How to Implement Role-Based Access Control

Model roles and permissions, enforce them with middleware, and centralize authorization checks so access rules stay consistent.

Regulations2

Regulation

Federal Risk and Authorization Management Program

US government program providing standardized approach to security assessment for cloud products and services

Regulation

FedRAMP High Baseline

The FedRAMP authorization baseline for cloud services handling high-impact US federal data such as law enforcement and health records.

Glossaries3

Glossary

OAuth 2.0

OAuth 2.0 is an authorization framework that lets an application obtain limited access to a user's resources on another service without exposing the user's credentials, by using access tokens.

Glossary

Role-Based Access Control (RBAC)

Role-based access control is an access model that assigns permissions to roles rather than individuals, and grants users access by assigning them roles.

Glossary

Attribute-Based Access Control (ABAC)

Attribute-based access control is an access model that grants or denies access by evaluating policies against attributes of the user, resource, action, and environment.