> Markdown version of [/playlists/authentication-authorization](https://www.wearedevelopers.com/playlists/authentication-authorization). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Playlist: Authentication & authorization 15 videos · 17 moments · 45.2 minutes ## Full-stack role-based authorization in 45 minutes - **Introduction to user authentication and authorization concepts** (00:00, 4min) — Differentiating between identity verification and access authorization establishes a strong foundation for full-stack security patterns. - **Representing user rights through stateful or stateless authentication** (15:12, 1min) — Transmitting user role information natively through web tokens ensures the user interface dynamically reflects valid permissions. [Learn more](https://www.wearedevelopers.com/videos/312-full-stack-role-based-authorization-in-45-minutes) ## Un-complicate authorization maintenance - **Differentiating authentication and authorization in modern web applications** (03:35, 4min) — While identity providers handle user verification, the application must natively govern valid resource operations. - **Enforcing multi-factor authentication inside dynamic authorization policies** (53:15, 2min) — Tracking secondary authentication signals during sensitive policy checks helps mitigate compromised primary session credentials. [Learn more](https://www.wearedevelopers.com/videos/889-un-complicate-authorization-maintenance) ## Decoupled Authorization using Policy as Code - **Evaluating common authentication and custom authorization challenges** (01:52, 0min) — While standardized authentication methods exist, custom authorization integrations often lack unified tooling and create isolated administrative si... [Learn more](https://www.wearedevelopers.com/videos/35-decoupled-authorization-using-policy-as-code) ## Meet Your New BFF: Backend to Frontend without the Duct Tape - **Securing entities with declarative authentication and authorization rules** (22:27, 5min) — Integrating standard cookie session tokens restricts endpoint visibility natively and simplifies interface security states seamlessly. [Learn more](https://www.wearedevelopers.com/videos/682-meet-your-new-bff-backend-to-frontend-without-the-duct-tape) ## Increased Performance and Developer Productivity with Jakarta EE 11 - **Security enhancements and concurrent authentication mechanisms** (21:35, 4min) — How concurrent authentication mechanisms and programmatic authorization rules enable fine-grained access control. [Learn more](https://www.wearedevelopers.com/videos/943-increased-performance-and-developer-productivity-with-jakarta-ee-11) ## Delegating the chores of authenticating users to Keycloak - **Restricting application access by intercepting early login flows** (20:34, 1min) — Intercepting unauthorized network participants early during the core authentication phase to improve broad system authorization security. [Learn more](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) ## Small, Secure, Interconnected: The next Internet Protocol - **Merging application authorization layers with network identity states** (28:36, 1min) — Extending foundational network handshake protocols into unified authentication boundaries allows teams to systematically protect proprietary systems. [Learn more](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) ## Architecting API Security - **Designing APIs for security from day one** (00:00, 3min) — Prioritizing early architectural design prevents critical authorization and authentication flaws commonly found in real-world application deployments. [Learn more](https://www.wearedevelopers.com/videos/377-architecting-api-security) ## Rethinking React State Management: The Power of Built-In Solutions - **Combining native tools for user authentication state management** (17:38, 4min) — Constructing an application-wide authorization state by weaving contexts, reducers, and state transformers together. [Learn more](https://www.wearedevelopers.com/videos/1019-rethinking-react-state-management-the-power-of-built-in-solutions) ## Kubernetes Security - Challenge and Opportunity - **Managing cluster access securely with admission control** (08:31, 1min) — Controlling access to the API server requires robust authentication, strict authorization for common operations, and admission controllers for gran... [Learn more](https://www.wearedevelopers.com/videos/412-kubernetes-security-challenge-and-opportunity) ## GenAI Security: Navigating the Unseen Iceberg - **Addressing vulnerabilities in model context protocol and retrieval frameworks** (12:30, 3min) — Implementing data retrieval capabilities at scale necessitates careful management of state, authentication, and authorization policies to prevent d... [Learn more](https://www.wearedevelopers.com/videos/1744-genai-security-navigating-the-unseen-iceberg) ## WeAreDevelopers LIVE - 11ty and a11y - **Preserving authentic author voice when drafting technical literature** (58:40, 1min) — Depending on generative algorithms to draft entire articles creates emotionally detached outputs that lack distinct character and tone. [Learn more](https://www.wearedevelopers.com/videos/1822-wearedevelopers-live-11ty-and-a11y) ## Beyond Kafka & RabbitMQ: Why NATS is the Future of Microservices Messaging - **Managing multi-tenancy and authentication with open-source operators** (21:19, 0min) — Extending core capabilities through specialized operators facilitates granular access control and multi-tenant architectures inside complex enterpr... [Learn more](https://www.wearedevelopers.com/videos/1646-beyond-kafka-rabbitmq-why-nats-is-the-future-of-microservices-messaging) ## One Developer Journey, Two Surfaces - **Integrating developer docs and product experiences seamlessly** (00:01, 1min) — How bridging the gap between product workflows and documentation creates an immersive developer experience. [Learn more](https://www.wearedevelopers.com/videos/1986-one-developer-journey-two-surfaces) ## Rest API Antipatterns - **Simplifying the Russian doll URL nesting architecture** (24:06, 2min) — Why deeply nested URL paths overcomplicate API security and create redundant authorization checks. [Learn more](https://www.wearedevelopers.com/videos/100208-rest-api-antipatterns)