Web Security · Junior · Question 53 of 75
What is the difference between authentication and authorization?
- 1Authentication is for admins, authorization is for regular users
- 2They mean the same thing in web development
- ✓Correct answer: Authentication checks who you are; authorization checks what you are allowed to do
Explanation
Logging in is authentication. Checking that you can edit this specific order is authorization, and it has to happen on every request.