Tag: #authorization
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 12 posts
12 posts are tagged #authorization; the most recent was published on 2026-07-26.
Often tagged together: #security 10 #oauth2 7 #authentication 6 #oidc 6 #jwt 5
Most read in the last 90 days:
Authentication, Authorization, and IDOR — Why the Login Is Fine but You Can See Data That Belongs to Someone Else
Most real data breaches come from authorization, not authentication. The classic case is IDOR, where the login passes normally but changing only the ID in the URL returns another user resource verbatim. This post separat
2026-07-26 · 15 min read #security#authorization#idor#api#multi-tenantWho Maintains OPA Now — Styra's Team Joins Apple, and 11 Months of Verifiable Record
On August 20, 2025, an announcement said OPA's founders and a number of Styra team members were joining Apple, and a rumor spread through the community that 'Apple acquired OPA.' Checking primary sources tells a differen
2026-07-17 · 12 min read #security#opa#authorization#open-sourceThe Evolution of Authorization Models — RBAC, ABAC, ReBAC, and OpenFGA/Zanzibar
Once authentication is solved, the next battleground is authorization. We trace the evolution of authorization models from RBAC role explosion through ABAC policy complexity to the ReBAC paradigm introduced by Google Zan
2026-06-12 · 15 min read #authorization#rbac#rebac#openfga#zanzibarKeycloak Authorization Services — Fine-Grained Access Control with UMA 2.0
A deep dive into Keycloak Authorization Services that goes beyond the limits of RBAC. Covers the resource/scope/policy/permission model, the UMA 2.0 grant flow, policy enforcer configuration, decision strategies, and how
2026-06-12 · 16 min read #keycloak#authorization#uma#oauth2#securityFine-grained Authorization (FGA) Systems in 2026 — Zanzibar, SpiceDB, Permify, OpenFGA, Cerbos, Cedar, Oso Deep Dive ♪ Listenable
Authorization no longer ends with one line of "if user.role == admin". Since Google's Zanzibar paper rewrote the industry's mental model, 2026 has more than a dozen FGA engines fighting it out — SpiceDB, OpenFGA (Auth0/O
2026-05-25 · 19 min read #authorization#fga#zanzibar#spicedb#permifyKeycloak Integration Hands-On — Run It with Docker, Configure Realm/Client, Wire Up Spring Boot and Next.js (2025 Hands-On Guide) ♪ Listenable
Don't build authentication yourself — use Keycloak. This is a follow-along hands-on: run Keycloak 26 with Docker, configure Realm/Client/User/Role, poke the OIDC endpoints with curl, and integrate a Spring Boot Resource
2026-05-14 · 23 min read #keycloak#oidc#oauth2#authentication#authorizationOAuth 2.0 & OIDC Deep Dive — Authorization Code, PKCE, JWT, DPoP, FAPI (2025)
OAuth 2.0 and OIDC run billions of times daily, yet most developers understand them only superficially. This guide dissects them from scratch: the four OAuth 2.0 flows, why PKCE became mandatory, JWT structure and pitfal
2026-04-15 · 13 min read #oauth2#oidc#openid-connect#authentication#authorizationOAuth 2.0 & Authentication Complete Guide 2025: JWT, Sessions, SSO, OIDC, Passkey
Everything about web authentication! OAuth 2.0 flows (Authorization Code/PKCE/Client Credentials), JWT (structure/verification/Refresh Token), Session vs Token, SSO (SAML/OIDC), Passkey (WebAuthn/FIDO2), Social Login, Se
2026-03-25 · 22 min read #oauth2#authentication#jwt#session#ssoOAuth2 & JWT Complete Guide: Everything About Authentication and Authorization for Developers ♪ Listenable
Everything about OAuth2 and JWT with practical code! Authorization Code/PKCE/Client Credentials flows, JWT structure and signature verification, Access/Refresh Token strategies, Session vs Token comparison, OIDC, securit
2026-03-23 · 23 min read #oauth2#jwt#authentication#authorization#securityOAuth 2.0 Mastery — Everything About Authentication and Authorization
From the inner workings of OAuth 2.0 to Authorization Code, PKCE, Refresh Tokens, and OpenID Connect. Why does a single Google login button require such a complex protocol? We fully dissect it with code and sequence diag
2026-03-02 · 7 min read #architecture#oauth2#security#authentication#authorizationKubernetes RBAC Complete Guide: Hands-On Practice for Golden Kubestronaut Exam Prep
From core concepts to real-world scenarios of Kubernetes RBAC (Role-Based Access Control). A hands-on guide covering least privilege implementation with Role, ClusterRole, RoleBinding, and ServiceAccount, plus Golden Kub
2026-03-02 · 8 min read #kubernetes#rbac#security#kubestronaut#ckaThe Definitive Guide to Next-Generation Digital Identity, SSO, and Keycloak in Practice
Compare SSO architectures and SAML/OAuth2/OIDC standards, then dive into Keycloak production deployment, authentication flows, RBAC/ABAC authorization, LDAP integration, Spring Boot/Next.js integration, and high availabi
2026-03-01 · 12 min read #keycloak#iam#sso#oauth2#oidc