Testing authentication and authorization (AuthN & AuthZ): it’s more than just a login form
summary
Explains differences between authentication (AuthN) and authorization (AuthZ), surveys common AuthN/AuthZ types and market implementations, and examines specifics of OAuth 2.0 and OpenID protocols. Covers security testing best practices for authentication and authorization and points to resources and hands-on places to practice testing login forms.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 3:03AuthN vs AuthZ
- 9:02Testing AuthN security
- 17:56Testing AuthZ security
- 25:22Access control tools
- 31:00Q&A
related talks
05mAre you talking about Auth with and N or a Z?
09mThe difference between authentication and authorization
29mAuthz as a dev workflow
15mFrom OpenID Connect to OpenID AuthZEN
39mAuthentication done right: consuming (and serving) Oauth2.0
42mBeyond Passwords: How WebAuthn Actually Works
36mAuthorization — the new black
30mAuthZEN in Practice: Standardizing Authorization for Cloud Native Platforms and Agents