← Software Knowledge
MODULE 06 · SOFTWARE KNOWLEDGE

Authentication & Security

Authentication and security concepts explain how software verifies identity, controls access, and protects data.

How the module connects

A secure system verifies identity first, checks permissions next, and protects the data and actions behind that boundary.

IdentityAccess DecisionProtected Data / Action

Module 06 Topics

AuthenticationVerify who a user or system is.Open topic → AuthorizationCheck what a verified identity may do.Open topic → PasswordUse a user-held secret during sign-in.Open topic → TokenCarry evidence of identity or granted access.Open topic → JWTCarry signed claims between a client and a server.Open topic → API KeyIdentify and control an API client.Open topic → SecretProtect private values used by software.Open topic → EncryptionProtect readable data with a key.Open topic → HashingCreate a one-way digest for comparison.Open topic → CookieCarry browser state between requests.Open topic → OAuthDelegate limited access without sharing a primary password.Open topic → SSOUse one trusted sign-in across connected applications.Open topic → RoleGroup related permissions under a named access pattern.Open topic → PermissionControl which actions an identity may perform.Open topic → CORSControl browser access to cross-origin responses.Open topic → CSRFDefend state-changing requests from cross-site forgery.Open topic → XSSPrevent untrusted content from becoming executable script.Open topic → Least PrivilegeGive each identity only the access its task requires.Open topic →
↑