https://github.com/abubakarmugha1/authentication-and-access-control-for-a-web-application
Implementing the OAUTH2 authorization mechanism using a dummy authorization server. Protecting the open endpoints of the web application by adding basic access control features.
https://github.com/abubakarmugha1/authentication-and-access-control-for-a-web-application
access-control authorization-server endpoint-protection javascript network-security oauth2 python
Last synced: 3 months ago
JSON representation
Implementing the OAUTH2 authorization mechanism using a dummy authorization server. Protecting the open endpoints of the web application by adding basic access control features.
- Host: GitHub
- URL: https://github.com/abubakarmugha1/authentication-and-access-control-for-a-web-application
- Owner: AbubakarMugha1
- Created: 2025-02-24T20:27:18.000Z (3 months ago)
- Default Branch: main
- Last Pushed: 2025-02-24T20:35:39.000Z (3 months ago)
- Last Synced: 2025-02-24T21:32:19.982Z (3 months ago)
- Topics: access-control, authorization-server, endpoint-protection, javascript, network-security, oauth2, python
- Language: Python
- Homepage:
- Size: 15.6 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
We implemented the OUTH2 framework using a dummy authorization server.
The key idea is to understand the information flow in OAUTH2 and how the protected user resources are lent to the requesting client application. The project involves the retrieval of
an access token (JWT) from the authorization server, decoding the token to extract important information and safely store the session information. Furthermore, I've created my own session tokens
to simplify the process of session validation. This is all present in the app.py
The access control configuration file simply shows the endpoint availability to each type of application user. The functionality itself is very simple and is a very good starting point
if you are looking to understand network security frameworks.