Module 3’s refresh pressure test is where our squad finally stopped hand-waving about “eventual consistency.” Dense, but fair.
Flagship course
Fintech Authorization Audit Lab
A six-session studio where your team diagrams, critiques, and revises authorization flows until the story survives both engineering and compliance readers.
Learning outcomes
- Produce a grant-to-revoke sequence diagram with explicit failure branches.
- Score scopes against customer journeys and name a risk owner per high-impact grant.
- Write a one-page limitation memo that states what the audit did not cover.
- Facilitate a 45-minute critique using Cloudifysys facilitation prompts.
Modules
1 · Inventory without theater
Catalog entry points, token types, and actors. Cut decorative architecture slides.
2 · Consent as a timed story
Map prompts, defaults, and re-consent triggers; note Korea open-banking patterns where relevant.
3 · Refresh & rotation pressure tests
Walk silent refresh failures, stolen refresh tokens, and partner-callback edge cases.
4 · Revoke paths people can support
Align customer support scripts with technical revoke timelines and residual access windows.
5 · Peer critique studio
Present your packet; receive structured notes from instructor and cohort.
6 · Limitation memo & handoff
Ship a final audit packet and a candid list of what remains untested.
Informational pricing
₩420,000 Harbor Seat
Private Channel Cohort from ₩1.85M for up to six learners. No checkout on this site — contact us to enroll. See pricing for tier details.
Yuna Baek
Lead instructor. Former payments platform engineer; now focuses on teaching authorization flow audits with evidence-first critique.
FAQ
Do I need a production system to enroll?
No. You may use a synthetic flow we provide. Teams with live systems get richer critiques, but secrecy constraints are respected — never paste secrets into shared boards.
Is this a penetration test?
No. The lab teaches authorization flow audits and documentation. We do not exploit production systems or supply exploit tooling.
What is a real limitation of this course?
We do not certify compliance with any specific Korean or international regulation. Completing the lab improves audit craft; it does not replace legal counsel or a formal assurance engagement.
Language of instruction?
English materials and facilitation, with optional Korean clarifying notes for Korea-based cohorts when scheduled.
Learner notes
★★★★☆
Clear facilitation. I wanted more time on partner-bank callbacks; the limitation memo module still forced us to write that gap down instead of ignoring it.