Blog

Mert Özen's blog posts on software development, backend, frontend, and DevOps.

Series

Authentication with JWT: How a Token Is Created and Verified

We cover authentication with JWT: what a token is, what its three parts mean, why it's signed, why the server is stateless, and setting up token creation and verification in .NET step by step.

15 Aug 2026 14 min 33

Backend PART 19

Authentication and Authorization: The Difference Between Identity Verification and Permission

We separate two concepts most developers confuse: authentication (who are you?) and authorization (what are you allowed to do?). The difference, the correct order, and how these are positioned in .NET.

15 Aug 2026 11 min 23