It’s time to talk about authentication and authorization. Before I get too far into it, I’ll take a moment to define these two terms:
Authentication: Verifying that you are who you say you are
Authorization: Verifying that you can do what you say you can do
Since it is tough to do authorization without proper authentication, I’ll start with authentication. Ensuring that the user is who they say they are is incredibly important for any secure website. But, unfortunately, the most common means we have to authenticate users, asking for a username and password, is not that secure. ...
