Auth-List
Auth List | 权限认证资料索引
Overview | 概述
-
2017-Auth Boss: Become an Auth Boss. Learn about different authentication methodologies on the web.
-
2017-登录工程:现代 Web 应用的典型身份验证需求: 在这篇文章里,我将简要介绍现代 Web 应用中几种典型的身份验证需求。
-
2017-Google 接口的权限认证技术纵览:本文以表格的方式详细列举了常见的接口权限认证技术的描述、适用场景、数据存储以及和服务端交互方式等内容。本文涉及到的常用权限认证技术包括:HTTP Basic 认证、无状态 Session Cookie、JWT、有状态 Session Cookie、随机令牌、请求签名、OAuth 等。
-
2019-可能是史上最全的权限系统设计: 权限管理是所有后台系统的都会涉及的一个重要组成部分,主要目的是对不同的人访问资源进行权限的控制,避免因权限控制缺失或操作不当引发的风险问题,如操作错误,隐私数据泄露等问题。
Session & Cookie
-
2016-Cookies vs. Tokens: The Definitive Guide: Finally, putting theory to practice, we’ll build an application that uses token authentication and make it a progressive web app.
验证码
-
腾讯验证码的十二年 : 验证码的诞生就是用来对抗自动机,但随着 OCR 技术的发展,腾讯验证码怎么发展让它能够有效持续对抗自动机。
JSON Web Token
-
2015-Learn how to use JSON Web Token (JWT) to secure your next Web App! (Example with Tests!!)
-
2016-5 Easy Steps to Understanding JSON Web Tokens (JWT): In this article, the fundamentals of what JSON Web Tokens (JWT) are, and why they are used will be explained.
-
2016-JSON Web Token Tutorial: An Example in Laravel and AngularJS
-
2017-JWT: The Complete Guide to JSON Web Tokens: This post is the first part of a two-parts step-by-step guide for implementing JWT-based Authentication in an Angular application (also applicable to enterprise applications).
2FA 双因素认证
SSO | 单点登录
OAuth
- 2019-A complete guide to Oauth2 protocol: Oauth2 protocol was designed to solve the delegation problem. OpenID is a protocol on top of Oauth2 for authentication.
SAM
- 2019-How SAML 2.0 Authentication Works: At its core, Security Assertion Markup Language (SAML) 2.0 is a means to exchange authorization and authentication information between services.