Unit 03 of 03
Application Services
Identity carried in the session and per-action authorization checks, background jobs moved out of the request, fragment caching and stale content, testing with isolated applications, and the security protections the framework turns on by default.
Published Updated
Lessons
- 01 Authentication and Authorization Measures how many requests a signed-in user's identity stays for, and why the authorization decision is recomputed on every request. 15 min read
- 02 Background Jobs Measures how many requests the record of a queued job stays for, what happens when the worker drains it, and why the result of the job is not in the same stay. 13 min read
- 03 Caching Measures a fragment being produced once and served to later requests, how it differs from the query cache, and how content becomes stale when the key does not change. 14 min read
- 04 Testing Measures reading a controller's instance variable from outside, the difference between a unit test and a feature test, and the effect on isolation of each test building its own application. 13 min read
- 05 Security Defaults Measures why the anti-forgery token is kept in the session, default escaping in the template and an allow list against mass assignment, and closes the course with a table of the stays of thirteen lessons. 10 min read