Skip to main content

Authentication


Platform · Authentication

Platform concern — Separate proving who someone is from deciding what that person may do.
Signed sessions, secure cookies, authorization checks, rotation, and revocation behavior.

Key concepts

Authentication

401

Authorization

403

Revocation

Immediate or bounded

Operating model

Decisions to make before production

Boundary and failure behavior

Authentication bugs become data-boundary bugs when identity and tenant scope are implicit.

Questions for review

Implementation notes

Decision lens

References

Last modified on September 10, 2026