Web Authentication
A mental model of modern web auth — sessions vs tokens, OAuth2/OIDC, passwordless and passkeys — built concept-first but always landing on how you'd wire it into a real app.
Start with lesson 1Lessons
Quick reference
Where to go next
The sources each lesson was checked against, and where to ask questions.
Every lesson is a single self-contained page: no sign-up, and nothing to install to read it.