I needed to quickly roll out a small security framework for an app at work. Since it’s a security framework, it must have at the minimum:
- User Management – add/edit/delete users for administrators and change password for users.
- Authentication – establish identity of a user by getting user credentials typically via a login page.
- Authorization – establish if an authenticated user is allowed access to a resource.