System Design · Junior · Question 9 of 75

How does authentication differ from authorization?

Explanation

First the system verifies identity (password, OAuth, passkey), then permissions for a specific action (role, ownership of the resource). Permission checks are mandatory on the server: a hidden button in the UI protects nothing.

Further reading

Problem with a question

System Design · Junior · question 9

Test yourself

Take the System Design · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.

Take this quiz