Skip to main content
grasp.study
About
Explore
Pricing
Log in
Try it for free
Back to course
👋
Welcome to a Grasp lesson
Create a free account
to keep studying and create your own study path.
Backend flows explained deeply
·
Module 8
Authentication and Authorization Deep Dive
1
Password Hashing with Bcrypt and Salts
Explain how password hashing works using a slow algorithm like bcrypt, including the role of salts.
2
Session-Based Authentication: Flow, Cookies, and Server-Side Storage
Describe the flow of session-based authentication, including cookie management and server-side session storage.
3
JWTs Explained: Tokens vs. Sessions
Explain the structure of a JSON Web Token (JWT) and compare token-based vs. session-based authentication.
4
Understanding OAuth 2.0 Authorization Code Flow
Describe the OAuth 2.0 Authorization Code grant flow and its role in third-party authorization.
5
RBAC vs. ABAC: Understanding Access Control Patterns
Explain Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) patterns.
6
JWT Authentication in Django
Implement JWT authentication in a Django application, including token generation and validation middleware.
7
Django RBAC: Built-in Permissions
Implement RBAC in a Django application using its built-in permissions framework.
8
JWT Security: Pitfalls and Best Practices
Discuss common JWT security pitfalls, including secret key management and strategies for token revocation.
Previous module
Tracing the Complete Request Lifecycle
Next module
Application-Level Caching with Redis