What is the difference between authentication and authorization in a web application?
-
A
Authentication checks what a user can do; authorization verifies who they are
-
B
Authentication verifies who a user is; authorization determines what they are allowed to do
-
C
They are interchangeable terms for the same security process
-
D
Authentication applies only to APIs while authorization applies only to UIs