Ah, I titled that wrong. Fixed! Mostly authentication, but authorization is also a topic I’m studying a lot recently. I feel like there’s more resources on that than the questions I have about authentication. I’m currently diving into the Google Zanzibar papers.
People on HN love to talk about authentication. I was excited for an authorization discussion! Alas. Good luck in your research! I am not the right person to help you here (beyond wondering at the former discrepancy).