Authentication
The process of verifying the identity of a client or user. HTTP supports multiple authentication schemes: Basic (base64 username:password), Bearer (token-based, common in OAuth 2.0), Digest (hash-based), and others. A failed authentication attempt returns 401 Unauthorized, while insufficient permissions after authentication returns 403 Forbidden.
โปรโตคอลที่เกี่ยวข้อง
กล่าวถึงในคู่มือ
Understanding HTTP Status Codes: A Complete Guide
HTTP Fundamentals
Essential HTTP Headers Every Developer Should Know
HTTP Fundamentals
HTTP Cookies: SameSite, Secure, and HttpOnly Explained
HTTP Fundamentals
HTTP Proxy Headers: X-Forwarded-For, Via, and Forwarded
HTTP Fundamentals
Designing Consistent API Error Responses
API Design & Best Practices
API Versioning Strategies: URI, Header, and Query
API Design & Best Practices
OpenAPI Specification: Design-First API Development
API Design & Best Practices
Designing Bulk API Endpoints: Batch Requests and Partial Failures
API Design & Best Practices
Debugging SMTP Delivery Failures: 4xx Temporary vs 5xx Permanent
Debugging & Troubleshooting
401 Unauthorized vs 403 Forbidden: When to Use Each
Security & Authentication
OAuth 2.0 Flows Explained: Authorization Code, Client Credentials, PKCE
Security & Authentication
JSON Web Tokens: Structure, Signing, and Common Pitfalls
Security & Authentication
API Keys vs OAuth vs JWT: Choosing the Right Auth Method
Security & Authentication
Implementing Mutual TLS (mTLS) for API Security
Security & Authentication
API Security Checklist: OWASP Top 10 for APIs
Security & Authentication
API Authentication Patterns: Bearer Tokens, API Keys, and Session Cookies
Security & Authentication
SMTP Reply Codes: What Your Email Server Is Telling You
Email Delivery
Improving Email Deliverability: SPF, DKIM, and DMARC Setup
Email Delivery
Diagnosing Email Bounces: Soft (4xx) vs Hard (5xx)
Email Delivery
SMTP Authentication Methods Explained
Email Delivery
Email Header Analysis: Tracing Delivery Path
Email Delivery
Bulk Email Delivery: Avoiding the Spam Folder
Email Delivery
DMARC Reporting: Analyzing Aggregate and Forensic Reports
Email Delivery
IP Warming for Email: Building Sender Reputation from Scratch
Email Delivery
DNSSEC Implementation Guide
DNS & Networking
DNS Record Types Explained: A, AAAA, CNAME, MX, TXT, and Beyond
DNS & Networking
SIP Response Codes: Understanding VoIP Call Flow
Real-Time Protocols
WebSocket Authentication Patterns
Real-Time Protocols
WebRTC Signaling with SIP and WebSocket
Real-Time Protocols
Health Check Endpoint Design Guide
Error Handling Patterns
Fallback Strategies: Default Values, Cached Responses, and Degraded Modes
Error Handling Patterns
Status Code Handling in Django
Framework Cookbooks
Express.js Error Middleware Complete Guide
Framework Cookbooks
Next.js API Routes: Status Codes, Error Handling, and Middleware
Framework Cookbooks
Rust Actix-web Error Handling: ResponseError Trait and Custom Errors
Framework Cookbooks
Reducing Time to First Byte (TTFB)
Performance & Optimization
API Response Time Optimization: From Database to Wire
Performance & Optimization
HTTP/2 Server Push: Promise and Pitfalls
Performance & Optimization
RFC 9110: HTTP Semantics Deep Dive
Protocol Deep Dives
RFC 5321: SMTP Protocol Deep Dive
Protocol Deep Dives
RFC 959: FTP Protocol Deep Dive
Protocol Deep Dives
RFC 3261: SIP Protocol Deep Dive
Protocol Deep Dives
TLS 1.3: Faster, Simpler, More Secure
Protocol Deep Dives
Migrating from FTP to SFTP: A Complete Transition Guide
Migration & Upgrades
Migrating from SOAP to REST APIs
Migration & Upgrades
API Migration: Monolith to Microservices
Migration & Upgrades
Migrating from WebSocket to Server-Sent Events
Migration & Upgrades
Migrating from TLS 1.2 to TLS 1.3: Configuration and Compatibility
Migration & Upgrades
API Gateway Patterns: Architecture and Use Cases
API Gateway Patterns
Authentication at the API Gateway: JWT Validation, OAuth, and API Keys
API Gateway Patterns
API Testing Strategies: Unit, Integration, Contract, and E2E
Testing & Mocking
API Schema Validation Testing: OpenAPI, JSON Schema, and Schemathesis
Testing & Mocking
API Security Testing: OWASP ZAP, Burp Suite, and Automated Scanning
Testing & Mocking
สถานการณ์ที่เกี่ยวข้อง
Getting 401 Instead of 403 (or Vice Versa)
HTTP
403 Forbidden Due to CORS Misconfiguration
HTTP
403 Forbidden Due to CSRF Token Mismatch
HTTP
550 Relay Access Denied — Cannot Send Through SMTP Server
SMTP
535 Authentication Failed — App Password Required
SMTP
503 Bad Sequence of Commands — AUTH Before STARTTLS
SMTP
gRPC PERMISSION_DENIED — Auth and Authorization Issues
gRPC
UNAUTHENTICATED — Missing or Invalid gRPC Metadata
gRPC
1008 Policy Violation — Authentication Timeout
WebSocket
530 Login Authentication Failed
FTP
กำหนดไว้ใน
RFC 9110
HTTP Semantics
RFC 6749
The OAuth 2.0 Authorization Framework
RFC 6750
The OAuth 2.0 Authorization Framework: Bearer Token Usage
RFC 7519
JSON Web Token (JWT)
RFC 7235
Hypertext Transfer Protocol (HTTP/1.1): Authentication
RFC 959
File Transfer Protocol (FTP)
RFC 2228
FTP Security Extensions
RFC 3261
SIP: Session Initiation Protocol
คู่มือการตัดสินใจ
ดูเพิ่มเติม
Status Code
HTTP Concepts
Session
HTTP Concepts
CORS (Cross-Origin Resource Sharing)
Security
CSRF (Cross-Site Request Forgery)
Security
SQL Injection
Security
OAuth 2.0
Security
JWT (JSON Web Token)
Security
API Key
Security
Bearer Token
Security
SMTP Authentication (SMTP AUTH)
Email & SMTP
Proxy Authentication
Web Standards
FTP Anonymous Access
FTP & File Transfer
MFA (Multi-Factor Authentication)
Authentication & OAuth
TOTP (Time-Based One-Time Password)
Authentication & OAuth
HTTP Basic Authentication
Authentication & OAuth
HTTP Digest Authentication
Authentication & OAuth
Passkey (WebAuthn)
Authentication & OAuth