Skip to main content

Authentication and Authorization

Authentication is the process of verification of a user's identity.

Authorization is the process of determining what an authenticated user is allowed to do.

Authentication Strategies​

There are various methods and protocols used to verify the identity of a user or system before granting access to resources or services. Here is a few of them.

  1. Password-Based Authentication. Users provide a username and password to log in.
  2. Multi-Factor Authentication (MFA). Requires two or more verification methods. Combines something the user knows (password), something the user has (security token), and/or something the user is (biometrics).
  3. Passwordless Authentication. Eliminates the need for passwords by using alternative methods like magic links, biometrics, or one-time codes.
  4. OAuth. An authorization framework that allows third-party services to exchange information without sharing passwords.

See Also​