API Design · Middle · Question 30 of 75
What's the difference between authentication and authorization in an API?
- 1Authorization happens before authentication
- ✓Correct answer: Authentication checks who the caller is; authorization checks what that caller may do with a specific resource
- 3They are the same
Explanation
Most API breaches come from broken authorization: authenticated users accessing objects or functions they shouldn't.