Authentication & Security

Authentication & Security Vocabulary

Auth Concepts

Security Vocabulary

• SQL injection — attack via malicious SQL in user input
• XSS (Cross-Site Scripting) — injecting scripts into web pages
• CSRF — tricking a user's browser into making unauthorized requests
• rate limiting — preventing abuse by limiting requests per time window
• least privilege — give only the minimum permissions needed

Useful Phrases

• "We use JWT for stateless authentication across our microservices."
• "Passwords are hashed using bcrypt with a salt before storing."
• "We apply rate limiting on the login endpoint to prevent brute-force attacks."