Authentication And Session Security

  1. 1.Foundations: AuthN vs AuthZ & the Threat Model
  2. 2.Password Storage Done Right
  3. 3.Login Attacks & Defences
  4. 4.Sessions & Cookies
  5. 5.Session Security
  6. 6.Multi-Factor Authentication
  7. 7.Token-Based Auth & JWTs
  8. 8.OAuth 2.0 & OpenID Connect
  9. 9.Account Recovery & Verification
  10. 10.Testing, Pitfalls & Hardening Checklist