API Authentication and Authroization

Subtitle

The two terms often used in tandem for access control in almost every system but they are inherently different. In this article i will try to explain difference between these two terms.

In simplest terms, Authentication is the process of verifying the identity of a user or system requesting access to an API, while Authorization determines what actions and resources a user or system is allowed to access within the API based on their authenticated identity. Let us see each of it one by one.