Tag: 인증

All the articles with the tag "인증".

• Feature-by-Feature Study #2 — JWT Authentication: An Access Pass the Server Doesn't Remember

  4 Aug, 2026

  How JWT solves the weakness of the session approach (the server having to remember every session). Covers the structure that packs information into the token itself (header, payload, signature), the trap that the payload is just base64, not encryption, code for creating and verifying tokens with jjwt, and the new problem JWT introduces (no revocation).

• Studying by Feature #1 — Session-Based Authentication: Why Doesn't HTTP Remember Me?

  30 Jul, 2026

  I decided to dig into features like login/auth, reservations, and payments one by one. The first topic is session-based authentication. Covers authN vs authZ, the fundamental problem caused by HTTP being stateless, how sessions work like a 'locker number tag,' Spring Security, why passwords are hashed with BCrypt, and the weaknesses of the session approach.

• Two Traps I Hit While Adding Kakao and Google Login to Supabase

  6 May, 2026

  id_token audience validation failures and missing redirect URIs. Both are traps that rarely show up in the official docs, so I'm recording how I ran into them and solved them myself.