Architecture worksheet
Would your authentication stack survive production?
Sessions, JWT, OAuth, API keys—or something else? Make seven real-world architecture decisions and discover the weakest layer in your design.
~5 minutes · No account required
Progress — 1 of 7
Decision 1 · Browser app
Authentication Stack Decision Lab
Start with the browser
Your backend serves the web app. Users need simple logout and immediate revocation after a password reset. What should represent the login?
Design principle
Choose the trust model before the technology.
The best authentication mechanism depends on who is calling, who must trust it, where the credential lives, how long it lives and how it can be revoked.