Coding StandardsSecurity and Identity
Security and Identity
Authentication, authorization, and defensive coding practices for identity-related flows.
These standards cover preventing access-control vulnerabilities (IDOR), correctly implementing account/email flows, issuing and validating tokens, and integrating with identity providers and gateways. Apply them whenever a feature touches authentication, authorization, or per-user data ownership.