API Testing · Junior · Question 73 of 75
What is the difference between authentication and authorization?
- 1Authentication checks who you are; authorization what you may do
- 2Authentication is for APIs; authorization is only for UIs
- 3They're two names for the same check in HTTP
Show the answer
Correct answer: Authentication checks who you are; authorization what you may do
Explanation
A valid token proves identity. Each endpoint must still check that this user may access this resource or action.