- System Security & Auth · System Design
LLearnViaNotes @learnvianotes· 1 min read Comprehensive reference for OAuth2, OIDC, JWT signatures, refresh token rotation, web vulnerabilities (CSRF, CORS, XSS, SQLi), encryption, and RBAC/ABAC models.
OAuth 2.0 & OpenID Connect (OIDC)
JWT & Refresh Token Mechanics
Vulnerability & Defense Matrix
| Vulnerability | Attack Mechanism | Primary Defense |
|---|
| CSRF | Unauthorized commands submitted from trusted user browser | Anti-CSRF tokens, SameSite=Strict/Lax cookies |
| CORS | Unauthorized cross-origin API requests | Configure Access-Control-Allow-Origin headers |
| XSS | Malicious JavaScript execution in victim browser | Content Security Policy (CSP), Contextual output escaping |
| SQL Injection | Injecting SQL syntax via untrusted user inputs | Parameterized queries, Prepared statements, ORMs |
Encryption: At Rest & In Transit
Free for students and teachers
Write notes like this one
Cards for every idea, quizzes and flashcards, read aloud — on the web and your phone.
Something wrong with this note? Open it to report