Security
confused deputy
a privileged component tricked into acting for someone (CSRF/SSRF)
Source board
This definition comes from the board below. Open it to see the term in context.
Authorization and IdentitySecurityAlso defined on Web Vulnerabilities.
More terms from this board
- ABACattribute-based
- access tokenAPI access (authZ)
- ACLper-resource permission list
- ID tokenwho the user is (authN)
- IDORaccessing another user's object by changing an id (authN-but-not-authZ)
- OAuth 2.0delegated authorization (scoped ACCESS TOKEN, no password shared)
- OIDCOAuth + an ID TOKEN (authentication / 'login with…')
- RBACrole-based
- ReBACrelationship-based (Zanzibar)
- scopea token's permission