What is the difference between authentication and authorization in a back-end system?
-
A
Authentication checks what a user can do; authorization verifies who they are
-
B
Authentication verifies identity; authorization determines what the verified user is allowed to do
-
C
They are synonyms for the same security check
-
D
Authentication applies to APIs; authorization applies only to web pages