Tag: authorization
Browse 9 practical software engineering resources tagged with "authorization". Discover code recipes, design patterns, documentation templates, and in-depth guides to help you build, deploy, and maintain production-ready solutions involving authorization. Each resource is written for engineers who ship real systems, with copy-paste examples and practical trade-offs.
Authorization and Access Control
Authorization determines what an authenticated user or service is allowed to do. It is implemented through roles, permissions, policies, attribute-based access control, and resource-level checks.
The resources below cover RBAC, ABAC, OAuth scopes, JWT claims, permission models, and policy enforcement. Each guide explains how to design authorization that is secure, flexible, and easy to audit.
Every resource includes clear explanations, copy-paste code, and practical warnings. Use them to make informed decisions, avoid production pitfalls, and speed up your delivery. If you are just getting started, read the beginner-friendly articles first; if you are experienced, jump straight to the advanced patterns and architecture guides. New resources are added regularly, so bookmark this page and check back for the latest patterns.
Implement ABAC
How to implement attribute-based access control with policy engines, live context evaluation, and...
Implement RBAC
How to implement role-based access control with hierarchical roles, permission grants, and...
Field-Level Auth with Custom GraphQL Directives
Add field-level authorization to GraphQL with custom schema directives. Check roles, permissions,...
RBAC Policy Template
A template for defining role-based access control policies, including roles, permissions,...
Access Control Policy Template
A template for defining authentication, authorization, RBAC, ABAC, MFA, password policies, session...
API Authentication Design Template
Template for documenting API authentication flows and token lifecycle: auth scheme selection, token...
API Security Checklist — Authentication to Encryption
A thorough security checklist for APIs: authentication, authorization, input validation, rate...
OAuth2 and OIDC: Authorization Code, PKCE, Token Validation
Master OAuth2 and OpenID Connect for production: authorization code flow with PKCE, token...
Security Best Practices Guide
A thorough guide to application security: authentication, authorization, input validation, secrets...