Glossary
Authentication and Authorization
Authentication is the process of verifying that a user or system is who it claims to be, typically via a password, certificate, or biometric. Authorization is the separate process of determining what an authenticated identity is permitted to do; conflating the two is a common source of access-control vulnerabilities.