What is the difference between authorization and authentication?

Question

Accepted Answer

Authentication verifies the identity of a user, while authorization determines what a user can access.

Authentication confirms the user's identity through credentials like username and password.
Authorization controls the user's access to resources or features based on their authenticated identity.
Example: Logging into a website (authentication) and then being able to view/edit specific pages based on user roles (authorization).

Accepted Answer

Authentication (AuthN) → "Who are you?"

Authentication is the process of verifying a user's identity.
It ensures that the person accessing a system is who they claim to be.
Common methods: Passwords, biometrics, OTPs, social logins, etc.
Authorization (AuthZ) → "What can you do?"

Authorization determines what actions or resources a user has permission to access after authentication.
It ensures users can only perform actions they are allowed to.
Common methods: Role-based access control (RBAC), permissions, API tokens, etc.
Example:
Imagine you are logging into a bank website:

Authentication: You enter your username and password to prove your identity.
Authorization: After logging in, you can view your account balance, but you may not have permission to modify system settings.

What is the difference between authorization and authentication?

Top Infosys Angular Developer interview questions & answers

Popular interview questions of Angular Developer

Top HR questions asked in Infosys Angular Developer