Studying by Feature #1 — Session-Based Authentication: Why Doesn't HTTP Remember Me?
I decided to dig into features like login/auth, reservations, and payments one by one. The first topic is session-based authentication. Covers authN vs authZ, the fundamental problem caused by HTTP being stateless, how sessions work like a 'locker number tag,' Spring Security, why passwords are hashed with BCrypt, and the weaknesses of the session approach.
