Loading
Topic
Python, FastAPI, and Django authentication, authorization, browser security, secrets, signed requests, and unsafe input boundaries.
Practice items tagged with Security & Auth.
Clarifies Django's object-permission hook and enforces ownership or tenancy in the query and policy path.
Explains backend ordering, session affinity, permission aggregation, and the difference between identity and authorization.
Connects browser-sent session cookies to Django's CSRF token checks for unsafe requests.
Uses separate Pydantic input and output models to prevent mass assignment and accidental data disclosure.
Uses a password-specific algorithm, measurable work settings, and gradual rehashing without blocking service capacity.
Uses FastAPI Security dependencies to combine declared scopes with current application authorization.