Blog

Mert Özen's blog posts on software development, backend, frontend, and DevOps.

Series

Role- and Policy-Based Authorization: Deciding Who Is Allowed to Do What

We deepen authorization: what role-based permission is, where it falls short, how the policy and claim-based approach offers a more flexible solution, and how we set these up in .NET.

15 Aug 2026 13 min 21

Backend PART 19

Authentication and Authorization: The Difference Between Identity Verification and Permission

We separate two concepts most developers confuse: authentication (who are you?) and authorization (what are you allowed to do?). The difference, the correct order, and how these are positioned in .NET.

15 Aug 2026 11 min 23