Oct 18, 2026Oct 18, 2026 · 14 min readAuthentication and AuthorizationFrom wax seals to OAuth: how backends verify who a user is and control what they can do, using sessions, JWTs, API keys, OAuth/OIDC, and RBAC.14 min read