One lesson
An individual lesson
This track has no lesson ready to buy yet. Each lesson becomes available only after it is built and reviewed.
$5.00Not available yet
All course tracks
Testing and security · 30 lessons · up to 10 minutes each
Authentication, Authorization, OAuth, and OIDC
A planned security path through identity protocols and server-enforced access checks.
Coming Soon
One-time purchase · USD
Choose what to unlock
Access is attached to your account after payment is verified. No subscription.
Full category
Authentication, Authorization, OAuth, and OIDC
Permanent access to the lessons published in this track when you buy. Future lessons are not included. 0 of 30 lessons are published; 0 are in owner review and 30 are Coming Soon.
$29.0030 lessons still in progress
Beginner
Lessons 1–10
01 Authentication, Authorization, OAuth, and OIDC: Sketch identity and session roles
Topic: identity and session roles
Draw a small map of identity and session roles in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Beginner4 minComing Soon02 Authentication, Authorization, OAuth, and OIDC: Name the parts of credential and MFA boundary
Topic: credential and MFA boundary
Label the main pieces in credential and MFA boundary in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Beginner5 minComing Soon03 Authentication, Authorization, OAuth, and OIDC: Trace an example of session lifetime and rotation
Topic: session lifetime and rotation
Follow one input through session lifetime and rotation in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Beginner6 minComing Soon04 Authentication, Authorization, OAuth, and OIDC: Compare choices for OAuth roles and grants
Topic: OAuth roles and grants
Write down one practical difference between OAuth roles and grants in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Beginner7 minComing Soon05 Authentication, Authorization, OAuth, and OIDC: Find the boundary in OIDC identity claims
Topic: OIDC identity claims
Mark where OIDC identity claims in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Beginner8 minComing Soon06 Authentication, Authorization, OAuth, and OIDC: Inspect an example of redirect URI validation
Topic: redirect URI validation
Annotate a minimal example of redirect URI validation in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Beginner9 minComing Soon07 Authentication, Authorization, OAuth, and OIDC: Connect authorization at data access to a neighboring concept
Topic: authorization at data access
Show how authorization at data access in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Beginner10 minComing Soon08 Authentication, Authorization, OAuth, and OIDC: Spot a failure mode in CSRF and token storage
Topic: CSRF and token storage
Describe one likely failure for CSRF and token storage in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Beginner3 minComing Soon09 Authentication, Authorization, OAuth, and OIDC: Read an official example of logout and revocation
Topic: logout and revocation
Summarize an official example of logout and revocation in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Beginner5 minComing Soon10 Authentication, Authorization, OAuth, and OIDC: Choose a use case for access-control negative tests
Topic: access-control negative tests
Match one small use case to access-control negative tests in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Beginner6 minComing Soon
Intermediate
Lessons 11–20
11 Authentication, Authorization, OAuth, and OIDC: Build an example with identity and session roles
Topic: identity and session roles
Create a small working example that uses identity and session roles in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Intermediate4 minComing Soon12 Authentication, Authorization, OAuth, and OIDC: Compose credential and MFA boundary with another component
Topic: credential and MFA boundary
Combine credential and MFA boundary in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Intermediate5 minComing Soon13 Authentication, Authorization, OAuth, and OIDC: Configure session lifetime and rotation for a small case
Topic: session lifetime and rotation
Set up session lifetime and rotation in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Intermediate6 minComing Soon14 Authentication, Authorization, OAuth, and OIDC: Validate inputs around OAuth roles and grants
Topic: OAuth roles and grants
Add a check around OAuth roles and grants in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Intermediate7 minComing Soon15 Authentication, Authorization, OAuth, and OIDC: Use OIDC identity claims in a short workflow
Topic: OIDC identity claims
Add OIDC identity claims in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Intermediate8 minComing Soon16 Authentication, Authorization, OAuth, and OIDC: Refactor redirect URI validation into a reusable unit
Topic: redirect URI validation
Extract redirect URI validation in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Intermediate9 minComing Soon17 Authentication, Authorization, OAuth, and OIDC: Exercise authorization at data access with sample data
Topic: authorization at data access
Run sample data through authorization at data access in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Intermediate10 minComing Soon18 Authentication, Authorization, OAuth, and OIDC: Observe CSRF and token storage outputs
Topic: CSRF and token storage
Capture the result of CSRF and token storage in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Intermediate3 minComing Soon19 Authentication, Authorization, OAuth, and OIDC: Recover from a logout and revocation failure
Topic: logout and revocation
Handle one expected failure from logout and revocation in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Intermediate5 minComing Soon20 Authentication, Authorization, OAuth, and OIDC: Document access-control negative tests behavior
Topic: access-control negative tests
Write a short usage note for access-control negative tests in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Intermediate6 minComing Soon
Advanced
Lessons 21–30
21 Authentication, Authorization, OAuth, and OIDC: Test a boundary around identity and session roles
Topic: identity and session roles
Add an edge-case test for identity and session roles in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Advanced4 minComing Soon22 Authentication, Authorization, OAuth, and OIDC: Harden credential and MFA boundary
Topic: credential and MFA boundary
Add the relevant access, safety, or validation control to credential and MFA boundary in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Advanced5 minComing Soon23 Authentication, Authorization, OAuth, and OIDC: Measure session lifetime and rotation
Topic: session lifetime and rotation
Record a small baseline for session lifetime and rotation in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Advanced6 minComing Soon24 Authentication, Authorization, OAuth, and OIDC: Reduce cost in OAuth roles and grants
Topic: OAuth roles and grants
Change one measurable cost in OAuth roles and grants in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Advanced7 minComing Soon25 Authentication, Authorization, OAuth, and OIDC: Diagnose a OIDC identity claims failure
Topic: OIDC identity claims
Use an observable signal to explain a failure in OIDC identity claims in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Advanced8 minComing Soon26 Authentication, Authorization, OAuth, and OIDC: Make redirect URI validation repeatable
Topic: redirect URI validation
Show that rerunning redirect URI validation in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Advanced9 minComing Soon27 Authentication, Authorization, OAuth, and OIDC: Review trade-offs in authorization at data access
Topic: authorization at data access
Compare two documented approaches to authorization at data access in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Advanced10 minComing Soon28 Authentication, Authorization, OAuth, and OIDC: Improve CSRF and token storage maintainability
Topic: CSRF and token storage
Refine CSRF and token storage in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Advanced3 minComing Soon29 Authentication, Authorization, OAuth, and OIDC: Verify logout and revocation end to end
Topic: logout and revocation
Check that a complete small flow using logout and revocation in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Advanced5 minComing Soon30 Authentication, Authorization, OAuth, and OIDC: Audit access-control negative tests against its source docs
Topic: access-control negative tests
Check the implementation of access-control negative tests in the context of identity, sessions, OAuth and OIDC, and resource authorization; save a short example or check that demonstrates the result.
Advanced6 minComing Soon
Reference documentation
References support the selected track topics while its lesson content is built and reviewed progressively.
This track is a catalog outline only. Each lesson remains unavailable until it is built and personally reviewed.