Identity and Access Management
Authentication and authorization at architecture scale: sessions, tokens, OAuth 2.0, OIDC, and access models.
Who are you, and what may you do: every system answers these two questions thousands of times a second. This topic covers session and token architectures with their trade-offs, the OAuth 2.0 and OpenID Connect flows that dominate modern identity, and the RBAC and ABAC models that keep authorization decisions consistent.