The Auth Playbook

Authentication and Authorization for Serious Platforms

Every platform needs auth, and most get it wrong. Covers the full spectrum - passwords, sessions, OIDC, SAML, SSO, RBAC, API auth, threat modeling, and provider migration - with production judgment you can trust. Working code in Go, Node.js, and Python. No vendor lock-in. No hand-waving past the hard parts.