Knowledge Maxxing← Back to topic library
Dev MaxxingIntermediateIdentity and Access60 sec
Authentication
Authentication is verifying that a user is who they claim to be, typically by checking credentials like a password or a token.
What matters
Authentication answers 'who is this?' specifically; it is a separate concern from deciding what an already-identified user is allowed to do.
Example
Logging in with an email and password, which the server checks against stored credentials, is an authentication step.
Common misconception
Authentication is not the same as authorisation; successfully proving who you are does not by itself determine what actions you're permitted to take.
Recall question
What specific question does authentication answer?
Keywords and related concepts
authenticationloginidentity verificationauthorisation