Authentication and authorization are the core responsibilities of any Auth system.

  • Authentication means checking that a user is who they say they are.
  • Authorization means checking what resources a user is allowed to access.

JWT