Backend Aug 5, 2026 12 min read
Spring Security Filter Chain and Authorization Explained
Design ordered Spring Security filter chains, deny-by-default request and method authorization, resource ownership checks, and safe browser boundaries.
Tag
Authorization
5 articles with this tag. Follow these related notes when you want a narrower study path.
Backend Jul 2, 2026 4 min read
OAuth Scopes Explained
Learn OAuth scopes for backend APIs, including permissions, consent, least privilege, access tokens, naming, validation, and common mistakes.
Backend Jul 1, 2026 6 min read
Least Privilege Explained for Backend Developers
Learn the principle of least privilege for backend systems, including users, services, API keys, database roles, cloud permissions, and operational tradeoffs.
Backend Jun 30, 2026 4 min read
RBAC vs ABAC: Access Control Models Explained
Compare RBAC and ABAC for backend authorization, including roles, attributes, policies, ownership checks, tenant context, and practical tradeoffs.
Backend Jun 29, 2026 4 min read
Authorization vs Authentication
Compare authentication and authorization in backend systems, including identity checks, permissions, roles, scopes, sessions, tokens, and API enforcement.