-
Authentication means checking that a user is who they say they are.
-
Authorization means checking what resources a user is allowed to access.
Allows one application to access the resources from another application without exposing the users password
Tokens
- Access tokens
- Refresh tokens