Questions

Status
Security and privacyLevel 2Open topic
Session storeEasyDesignDesignEasy25 minPassword reset by email linkEasyDesignDesignEasy25 minAccess rules for a school grade bookEasyDesignDesignEasy25 minSigned webhooks for an invoicing APIEasyDesignDesignEasy25 minEncrypting answers on a clinic intake formEasyDesignDesignEasy30 minLog ingest with PII redactionMediumDesignCapital One styleDesignCapital One styleMedium35 minEnterprise dashboarding backendMediumDesignDesignMedium35 minMulti-device session managementMediumDesignNetflix styleDesignNetflix styleMedium35 minOAuth 2.0 authorization serverMediumDesignGoogle styleDesignGoogle styleMedium40 minAPI key management and revocationMediumDesignStripe styleDesignStripe styleMedium35 minRBAC with delegationMediumDesignServiceNow styleDesignServiceNow styleMedium35 min
Session revocation across stateless serversMediumDesignDesignMedium40 minOAuth consent and scope managementMediumDesignGoogle styleDesignGoogle styleMedium40 minTeam file sharingMediumDesignDesignMedium35 minAPI key issuance and revocationMediumDesignStripe styleDesignStripe styleMedium40 minPasswordless authenticationMediumDesignApple styleDesignApple styleMedium40 minCAPTCHA challenge serviceMediumDesignGoogle styleDesignGoogle styleMedium35 minEnterprise file authorizationMediumDesignGoogle styleDesignGoogle styleMedium40 minEdge compute JWT validationHardDesignDesignHard45 minAccount-takeover and collusion detectionHardDesignPayPal styleDesignPayPal styleHard50 minGDPR deletion lineage trackingHardDesignDesignHard45 minStateless JWT revocation at edgeHardDesignDesignHard45 minSecrets distribution at scaleHardDesignDesignHard45 minMulti-tenant data isolationHardDesignSalesforce styleDesignSalesforce styleHard45 minEnterprise SSO federationHardDesignMicrosoft styleDesignMicrosoft styleHard40 minPasskey authentication systemHardDesignApple styleDesignApple styleHard40 minEncryption and key managementHardDesignAmazon styleDesignAmazon styleHard45 minRisk-based step-up authenticationHardDesignPayPal styleDesignPayPal styleHard40 minService-to-service authenticationHardDesignMicrosoft styleDesignMicrosoft styleHard45 minService-mesh PKIHardDesignGoogle styleDesignGoogle styleHard45 minDurable object storeHardDesignAmazon styleDesignAmazon styleHard50 minGDPR erasure with lineage proofHardDesignDatabricks styleDesignDatabricks styleHard45 minToken revocation at edgeHardDesignDesignHard50 minPer-tenant encryption and crypto-shreddingHardDesignSalesforce styleDesignSalesforce styleHard50 minCross-domain SSO and global logoutHardDesignGoogle styleDesignGoogle styleHard50 minSynced and device-bound passkeysHardDesignApple styleDesignApple styleHard50 minToken downscoping without central exchangeHardDesignGoogle styleDesignGoogle styleHard50 minSCIM provisioning and offboardingHardDesignSalesforce styleDesignSalesforce styleHard45 minDynamic database credentialsHardDesignDesignHard50 minRefresh token rotation theft detectionHardDesignDesignHard45 minSupport impersonation with auditHardDesignStripe styleDesignStripe styleHard45 minMulti-tenant SSO with IdP routingHardDesignSalesforce styleDesignSalesforce styleHard45 minWorkload bootstrap identity attestationHardDesignGoogle styleDesignGoogle styleHard50 minObject storage serviceHardDesignAmazon styleDesignAmazon styleHard45 minAuthentication and SSO serviceHardDesignSalesforce styleDesignSalesforce styleHard50 minSecrets management vaultHardDesignDesignHard50 minWAF and bot detectionHardDesignShopify styleDesignShopify styleHard50 minPII tokenization serviceHardDesignStripe styleDesignStripe styleHard45 minCertificate and PKI managementHardDesignGoogle styleDesignGoogle styleHard50 min