课程: Secure Coding in Go

今天就学习课程吧!

今天就开通帐号,24,700 门业界名师课程任您挑!

Overview of authentication issues

Overview of authentication issues - Go教程

课程: Secure Coding in Go

Overview of authentication issues

- [Instructor] On August, 2020, the whole voter book of Israel was hacked. Personal details such as nationality, address, and more, of 6.5 million people was exposed. The reason was an insecure API endpoint that allowed people to get the names and passwords of admin users. You have a lot to do when creating an API. Routing, names, data structure, civilization, and more. Sadly, authentication and authorization is the last thing that people think about. And most of the time it's added as an afterthought. In authentication, you validate that the user accessing the API is actually who they say they are. In authorization, You check that the validated user is allowed to do the action they want to do. There are many ways of doing both. Do your homework and pick the ones that matches your needs.

内容