The seventh chapter shows how the web creates continuity and identity on top of stateless HTTP. It covers the place of application state, cookies and server-side sessions, browser storage and tokens, and the difference between authentication and authorization. The chapter closes with OAuth 2.0, OpenID Connect, and single sign-on, which entrust login and the delegation of access to an external provider.
State, identity, and access
The seventh chapter shows how the web creates continuity and identity on top of stateless HTTP. It covers the place of application state, cookies and server-side sessions, browser storage and tokens, and the difference between authentication and authorization. The chapter closes with OAuth 2.0, OpenID Connect, and single sign-on, which entrust login and the delegation of access to an external provider.