Authorization fundamentals?

Authorization
Not many great resources
Got recommendations?