3 ms·
It’s hard because the concepts of authentication and authorization are simple to abstract but hard to keep separate at a technical level. It’s actually super po
by awill88 3y ago
It’s hard because the concepts of authentication and authorization are simple to abstract but hard to keep separate at a technical level. It’s actually super powerful once you futilely attempt to craft your own system that keeps the concerns separate.
Oauth is authz
But do get in “the door” you need OIDC + PKCE auth code grant.. or authn