Module
Authentication and Authorization
Sign in to add this module to your path and practice.
About
Human and machine authentication (passwords, MFA, tokens, certificates), session management, authorization models (ACLs, capabilities, RBAC, ABAC), and common failures (broken access control).
Goal
Design a basic authn/authz architecture for a web or networked service including session handling, MFA options, and least-privilege authorization checks; identify OWASP-style broken access control issues.
Prerequisites
Unlocks
Tutor
Ask questions about this module.
Hi — I'm your tutor for Authentication and Authorization. Ask about the concepts, goal, or where you're stuck.