Authentication and Authorization

Prove who a user is (sessions, tokens, OAuth) and decide what they may do (roles, permissions).

Intermediate

Never store plain passwords — hash with Argon2 or bcrypt. Use well-tested libraries (Authlib, django-allauth) instead of writing your own.

Spotted a mistake or want to add detail? Suggest an improvement — Content Contributors' edits are reviewed by editors before they go live.

Discussion (0)