← Tech dictionary
Security
What is Authentication vs authorization?
Authentication verifies who you are (logging in); authorization decides what you are allowed to do (permissions). In HTTP, 401 means not authenticated and 403 means authenticated but not allowed.
Learn it properlySpring Boot tutorials — free, with diagrams, quizzes and a certificate