Quiz Entry - updated: 2026.07.14
What is the difference between authentication and authorization?
Authentication verifies who you are, while authorization decides what you are allowed to access.
| Authentication | Authorization |
|---|---|
| "Are you who you claim to be?" | "Are you allowed to do this?" |
| Verify identity (password) | Check permissions |
| Happens at login | Happens on each request |
| Sets session.user | Checks session.user permissions |
Example: Logging in authenticates you. Accessing your own profile (but not others') is authorization.