Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect

How does a website know who you are? When you type your email and password into a login form and hit enter, a surprisingly complex set of decisions happens in the background. The server checks your id