Do you know the difference between Authentication and Authorization ?

Think of it like entering a fancy building,

🔒 Authentication

It's like showing your ID at the entrance of a building to prove who you are. You gotta prove you're on the guest list (valid username and password).

🔑 Authorization

Once you're inside the building, authorization comes into play. It's like getting permission to access certain rooms or resources within the building. Even if you're on the list, you might not get everywhere! Think VIP access for certain floors (restricted areas).

In short:

• Authentication = Who are you ? (proving you're a guest)

• Authorization = What can you do here ? (access based on your "guest type")