https://www.compilemymind.com/tags/identity-security/ Recent content in Identity-Security on Compile My Mind Hugo en Sun, 23 Aug 2026 15:06:03 +0300 https://www.compilemymind.com/posts/authentication-vs-authorization/ Sun, 23 Aug 2026 15:06:03 +0300 https://www.compilemymind.com/posts/authentication-vs-authorization/ <p>A customer signs in to an invoice portal, opens invoice <code>1042</code>, and sees exactly what they expect.</p> <p>Then they change the address to <code>/invoices/1041</code>.</p> <p>The page loads another customer&rsquo;s invoice.</p> <p>Nothing was wrong with the login. The password may have been correct, multi-factor authentication may have succeeded, and the session may have been valid. The failure happened afterward: the application proved who was making the request but never checked whether that person was allowed to read that particular record.</p>