https://www.shkcorp.com/blog Practical notes on product management, distributed systems, and AI—written from real engineering and product experience. en-us kshameed7@gmail.com (Hameed Syed K) kshameed7@gmail.com (Hameed Syed K) Mon, 19 Oct 2026 00:00:00 GMT https://www.shkcorp.com/blog/iam-chapter-5-oauth-part-1 https://www.shkcorp.com/blog/iam-chapter-5-oauth-part-1 Letting an app act for you, without handing over your password. The authorization code flow walked step by step, why the code is useless without a client secret, and the access-token-as-hotel-key-card analogy that makes refresh tokens click. Mon, 19 Oct 2026 00:00:00 GMT kshameed7@gmail.com (Hameed Syed K) iamoauthauthorization-code-flowtokenssecuritystudy-notes