Skip to content

    Backend System Design, module B15

    Security

    Authentication, OAuth and OIDC, JWT, Spring Security, access control, encryption, secrets, injection, SSRF and privacy.

    1 of 16 lessons published

    1. 1
    2. 2

      Authentication vs Authorization, Sessions vs Tokens (coming soon)

      Standard · beginner

    3. 3

      OAuth 2.0, OpenID Connect and PKCE (coming soon)

      Flagship · intermediate

    4. 4

      JWT: Structure and Pitfalls (coming soon)

      Standard · intermediate

    5. 5

      Authentication Flows End to End (coming soon)

      Flagship · advanced

    6. 6

      Spring Security Architecture and the Filter Chain (coming soon)

      Standard · intermediate

    7. 7

      RBAC, ABAC and ReBAC (coming soon)

      Standard · intermediate

    8. 8

      Encryption at Rest and in Transit (coming soon)

      Standard · intermediate

    9. 9

      Secrets Management (coming soon)

      Standard · intermediate

    10. 10

      Input Validation and Injection Prevention (coming soon)

      Standard · intermediate

    11. 11

      SSRF and the OWASP API Security Top 10 (coming soon)

      Standard · intermediate

    12. 12

      Zero Trust and Least Privilege (coming soon)

      Standard · advanced

    13. 13

      Audit Logging (coming soon)

      Focused · intermediate

    14. 14

      Compliance and Privacy (GDPR and Similar) (coming soon)

      Standard · intermediate

    15. 15

      Threat Modeling for Backend Systems (coming soon)

      Standard · intermediate

    16. 16

      CORS: Server Configuration (coming soon)

      Focused · intermediate

    All Backend System Design modules