September 2024
Intermediate to advanced
743 pages
27h 48m
English
As mentioned earlier, a distinction is made in web applications between authentication (i.e., checking whether a user is who he or she claims to be) and authorization (i.e., checking whether a user is allowed to perform a certain action).
Various strategies exist for authentication, the most important of which I will present in this section, namely, the following:
Basic authentication
Session-based authentication
Token-based authentication
As the name suggests, basic authentication is the simplest type of authentication. The process consists of the four steps shown in Figure 20.10.
Figure 20.10 Workflow in Basic Authentication
In the first step, the client sends an HTTP request ...
Read now
Unlock full access