Authentication Jul 25, 2026 7 min read
OAuth Authorization Code Flow Explained
Implement OAuth Authorization Code with PKCE safely in Spring Security and Node.js, including state, callbacks, token exchange, tests, and mistakes.
Tag
OAuth
10 articles with this tag. Follow these related notes when you want a narrower study path.
API Design Jul 25, 2026 7 min read
OpenAPI Security Schemes Explained
Model bearer tokens, API keys, OAuth 2.0, and OpenID Connect in OpenAPI with Springdoc and Express examples, overrides, tests, and enforcement boundaries.
Backend Jul 2, 2026 5 min read
OAuth Client Credentials Flow Explained
Learn the OAuth client credentials flow for service-to-service APIs, including clients, secrets, scopes, tokens, rotation, and security risks.
Backend Jul 2, 2026 4 min read
OAuth Scopes Explained
Learn OAuth scopes for backend APIs, including permissions, consent, least privilege, access tokens, naming, validation, and common mistakes.
Backend Jun 30, 2026 5 min read
API Key vs OAuth Token: Practical Backend Differences
Compare API keys and OAuth tokens for backend APIs, including identity, scopes, rotation, expiration, user context, service access, and security tradeoffs.
Backend Jun 30, 2026 5 min read
Refresh Token Rotation Explained for Backend Developers
Learn how refresh token rotation works, why reuse detection matters, and how backend teams can design safer token refresh, logout, and revocation flows.
Backend Jun 29, 2026 4 min read
JWT Claims Explained
Learn common JWT claims for backend authentication, including sub, iss, aud, exp, nbf, iat, jti, scopes, roles, tenant context, and validation mistakes.
Backend Jun 29, 2026 5 min read
OAuth 2.0 vs OpenID Connect
Compare OAuth 2.0 and OpenID Connect for backend developers, including authorization, login, ID tokens, access tokens, scopes, and common mistakes.
Backend Apr 19, 2026 6 min read
OAuth 2.0 Explained for Backend Developers
A backend-focused OAuth 2.0 guide covering roles, authorization code flow, PKCE, scopes, tokens, client credentials, and common mistakes.
Backend Apr 12, 2026 6 min read
Access Token vs Refresh Token
Compare access tokens and refresh tokens in backend authentication, including lifetime, storage, rotation, revocation, and security tradeoffs.