What It Takes to Build AAA?
summary
Describes building an AAA (Authentication, Authorization, Accounting) service using PHP for a production environment. Covers the problems of managing user identity, access control and tracking usage, and outlines an architecture and implementation approach for an AAA system in PHP.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 1:05Coffee business metaphor
- 4:49How cookies work
- 7:58Secure cookies with encryption
- 13:02REST and stateless servers
- 17:18Creating signed tokens
- 21:10Token revocation problems
- 24:16Token expiration and refresh
- 26:03Tokens vs alternatives
- 27:33Picket pattern for microservices
- 31:11Microservice authorization
- 32:16Access rights hierarchy
- 34:27Resource-based access model
- 37:07Request filtering for permissions
- 39:57Q&A
related talks
01h 46mAuthentication & Authorization
50mIn the world of Password123, be someone's #@%^)*!
45mSecurity Architecture, An Adventure?
29mSecuring PHP Applications with Zero Trust Principles
23mCan AI Replace Authentication Systems? Frontline Security Lessons
12mRBAC Project
34mThe Path of Secure Digital Identity
47mProtect your API with OAuth2