Tag
Read 7 articles on Authorization by Ashish Srivastava — practical guides covering implementation patterns, security, and production lessons.
7 posts
Learn how to build dynamic authorization logic with ABAC, Spring Security, OPA, and Rego policies for fine-grained access control in Java applications.
Learn how Pushed Authorization Requests (PAR) defined in RFC 9126 improve OAuth 2.0 security and mitigate the risk of authorization code interception.
Part 3 · OAuth 2.0 SecurityCompare Role-Based Access Control and Attribute-Based Access Control models to determine the best authorization strategy for your infrastructure using OPA and XACML.
Learn essential patterns for securing GraphQL APIs, covering authentication flows, authorization strategies, and managing query complexity to prevent abuse.
Learn to implement method-level authorization in Spring applications using @PreAuthorize, @Secured, and Spring Expression Language (SpEL) for effective RBAC.
Part 4 · Spring Security Deep Dive SeriesExplore essential strategies for securing GraphQL endpoints with Spring Security, including effective authorization patterns and rate limiting techniques.
Part 1 · Secure Backend Architecture SeriesLearn how to secure your APIs using rate limiting, JSON Web Tokens, and proper OAuth2 scope management to prevent unauthorized access.
Part 6 · Zero Trust & Modern Security Architecture Series
