Authentication
Proving who a user is and deciding what they may do: sessions, tokens, OAuth 2.0 and OpenID Connect, passkeys, and authorization models. Full-stack interviews ask it constantly, and the follow-ups always land on where tokens live and how they're revoked.Chapters for this topic are planned.