New Authorization Patterns Cheat Sheet

[dadrus]

Please make sure that for your contribution:

• In case of a new Cheat Sheet, you have used the Cheat Sheet template.
• All the markdown files do not raise any validation policy violation, see the policy.
• All the markdown files follow these format rules.
• All your assets are stored in the assets folder.
• All the images used are in the PNG format.
• Any references to websites have been formatted as [TEXT](URL)
• You verified/tested the effectiveness of your contribution (e.g., the defensive code proposed is really an effective remediation? Please verify it works!).
• The CI build of your PR pass, see the build status here.

This PR is a continuation of the work started with #1746 and #1808 and includes the content from my Authorization Patterns blog post with info boxes and the introduction part removed.

The first section references the authentication patterns and identity propagation patterns cheat sheets. Since the last one is not yet merged, there is a broken link right now.

[dadrus]

@jmanico, @mackowski, @szh: I'm not sure how to proceed with the next two parts - Decision Dimensions for Authorization Patterns and Practical Considerations & Recommendations. The first outlines and discusses the aspects, required to be considered while selecting a proper authorization patterns for a given context. The second combines these into the actual decision framework and concludes the blog post series with recommendations and examples. What are your thoughts on that? Should I simply file both as separate cheat sheet PRs and we try to move the contents accordingly afterwards?

The very first part of the series - Core Concepts is also not yet included, but actually required to better understand the topic. I referred to it again and again, especially from the last two parts of the series.

[jmanico]

There are some markdown errors to resolve:

cheatsheets_draft/Authorization_Patterns_Cheat_Sheet.md:71 MD012/no-multiple-blanks Multiple consecutive blank lines [Expected: 1; Actual: 2]
cheatsheets_draft/Authorization_Patterns_Cheat_Sheet.md:135 MD012/no-multiple-blanks Multiple consecutive blank lines [Expected: 1; Actual: 2]

[jmanico]

cc @mackowski @szh

[szh]

This is a bit out of my league to review. The one comment I'll say is that it feels a bit jargon-filled. I would like for it to be more approachable. But perhaps that's simply the nature of the topic?

[jmanico]

This is a bit out of my league to review. The one comment I'll say is that it feels a bit jargon-filled. I would like for it to be more approachable. But perhaps that's simply the nature of the topic?

I think you feedback is right on. I can do a more careful review later this week.

[dadrus]

There are some markdown errors to resolve:

cheatsheets_draft/Authorization_Patterns_Cheat_Sheet.md:71 MD012/no-multiple-blanks Multiple consecutive blank lines [Expected: 1; Actual: 2] cheatsheets_draft/Authorization_Patterns_Cheat_Sheet.md:135 MD012/no-multiple-blanks Multiple consecutive blank lines [Expected: 1; Actual: 2]

resolved :)

[dadrus]

Since the identity propagation patterns cheat sheet is merged, the broken link mentioned in the description of this PR is now fixed.