Let’s Sketch Identity: Authentication vs. Authorization
So, you are building an application and need a login form. In it, you’ll get the user’s email and password, send them to an API, and… something happens. The user is logged in afterwards. But what is that something? How does your application decide who gets in and what they get to see? This is…