Phase 6 · Identity, security and hardening

Week 16: Identity and security

Friday deliverable: Threat model and auth features

  1. Day 1Password hashing with argon2id; sign-up and loginOutline only
  2. Day 2Sessions and cookies (HttpOnly, Secure, SameSite); CSRFOutline only
  3. Day 3Roles and access-control tests; audit logOutline only
  4. Day 4OAuth 2.0 and OIDC flow; JWT trade-offsOutline only
  5. Day 5STRIDE threat model; Redis rate limiting; idempotency keys on paymentsOutline only