FundamentalsIntermediateFree lab
Fundamentals · browser room
Authentication & Authorization
Intermediate80 ptsAuthRBAC
Objective
Login → session/JWT → role check → allow or deny.
Cyber Flow Explorer · 4 steps · Network / Sequence / Packet / Code.
Isolated browser lab. Practice here first — no live targets. Optional deeper practice lives in the Academy library after you finish this room.
Answer panel
Challenge workspace
Complete the room tasks, then submit here to mark the room done.
CYNARKS|Cyber Flow Explorer
Teaching simulation · not live capture
Authentication & Authorization
Lab IdP only.
1. Login
Userbrowser
APIresource
Users DBcreds
Login
User submits credentials (authentication).
POST /login
- #1 user → api Login POST /login
Space · ← → · R restart
Hint
Identity ok, permission missing.
Why this is correct
Login proves identity; RBAC/policies gate actions.