# authz

Authorization (AuthZ) determines what an authenticated identity can do and which system resources it can access.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## 【kube-apiserver】Authentication：SA、Bearer、OIDC 边界

DevFeed: [【kube-apiserver】Authentication：SA、Bearer、OIDC 边界](<https://devfeed.tech/articles/kube-apiserver-authentication-sa-bearer-oidc-33966.md>)

Original publisher: [Read original article](<https://quant67.com/post/apiserver/10-authentication/10-authentication.html>)

Author: Liao Tonglang

Published: 2026-08-28T00:00:00Z

Content type: tutorial

Language: zh

Sources: [土法炼钢 - 系统与基础设施](<https://devfeed.tech/sources/source-4.md>)

Topics: [Authentication](<https://devfeed.tech/topics/authentication.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [JSON Web Tokens](<https://devfeed.tech/topics/jwt.md>), [authz](<https://devfeed.tech/topics/authz.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [apiserver](<https://devfeed.tech/tags/apiserver.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [bearer-token](<https://devfeed.tech/tags/bearer-token.md>), [distributed](<https://devfeed.tech/tags/distributed.md>), [jwt](<https://devfeed.tech/tags/jwt.md>), [k8s](<https://devfeed.tech/tags/k8s.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [serviceaccount](<https://devfeed.tech/tags/serviceaccount.md>), [v1-30-3](<https://devfeed.tech/tags/v1-30-3.md>)

### AI overview

This Chinese-language tutorial explains the kube-apiserver authentication chain in Kubernetes v1.30.3. It distinguishes X.509 certificates, ServiceAccount tokens, static and bootstrap tokens, OIDC JWTs, webhook authentication, and anonymous requests, and separates authentication failures such as 401 from storage-layer failures such as 503 or 504.

### Source excerpt

钉 K8s v1.30.3 的认证链：X509、SA token（bound token）、Bearer、OIDC、Webhook token、匿名用户；ServiceAccount bound token 与 TokenRequest 语义；apiserver 认证 flags 边界；401 与存储层故障的分列；AuthZ 路径见第 11 篇。

## Angular-ing for AuthZ, Problematic anti-patterns in Single Sign On Systems

DevFeed: [Angular-ing for AuthZ, Problematic anti-patterns in Single Sign On Systems](<https://devfeed.tech/articles/angular-ing-for-authz-problematic-anti-patterns-in-single-sign-on-systems-32608.md>)

Original publisher: [Read original article](<https://eaton-works.com/2024/03/05/f500-app-hack/>)

Author: Eaton

Published: 2024-03-05T05:00:00Z

Content type: article

Language: en

Sources: [Eaton Works Feed](<https://devfeed.tech/sources/eaton-works-feed.md>)

Topics: [Single sign-on (SSO)](<https://devfeed.tech/topics/sso.md>), [authz](<https://devfeed.tech/topics/authz.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Angular](<https://devfeed.tech/topics/angular.md>), [API keys](<https://devfeed.tech/topics/api-keys.md>), [API](<https://devfeed.tech/topics/api.md>)

Tags: [angular](<https://devfeed.tech/tags/angular.md>), [api](<https://devfeed.tech/tags/api.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [authz](<https://devfeed.tech/tags/authz.md>), [security](<https://devfeed.tech/tags/security.md>), [sso](<https://devfeed.tech/tags/sso.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

The article describes an ASPEN team's research into an SSO login-flow flaw in an Angular application at a Fortune 500 healthcare company. It explains that exposed client-side API credentials and a user-search API accepting the value "all" enabled retrieval of user information; the reported vulnerability was resolved and mitigated.

### Source excerpt

(ASPEN) A critical SSO vulnerability in a Fortune 500 app risked millions of records. Learn about SSO security risks, fixes, and protecting APIs from similar attacks.

## Identity Governance & Security, Community Survey, AWS re:Invent and more.

DevFeed: [Identity Governance & Security, Community Survey, AWS re:Invent and more.](<https://devfeed.tech/articles/identity-governance-security-community-survey-aws-re-invent-and-more-29775.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/november-newsletter/>)

Author: info@goteleport.com (Ben Arent)

Published: 2023-11-16T00:00:00Z

Content type: news

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [audit](<https://devfeed.tech/topics/audit.md>), [authz](<https://devfeed.tech/topics/authz.md>), [account](<https://devfeed.tech/topics/account.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>)

Tags: [account](<https://devfeed.tech/tags/account.md>), [audit](<https://devfeed.tech/tags/audit.md>), [authz](<https://devfeed.tech/tags/authz.md>), [aws](<https://devfeed.tech/tags/aws.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [events](<https://devfeed.tech/tags/events.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [security](<https://devfeed.tech/tags/security.md>), [survey](<https://devfeed.tech/tags/survey.md>)

### AI overview

Teleport's newsletter highlights its Identity Governance & Security launch, including account and infrastructure access monitoring, audit logs, access reviews, and just-in-time access requests. It also announces a Teleport community survey, AWS re:Invent activities, and a Kubernetes security panel.

### Source excerpt

An online version of Teleports monthly newsletter. Covering the latest news, events, and updates from the Teleport team.