Up until now, we have been working anonymously in our application. To read blog posts, we do not need to know who the user is – our blog post will be open to all for reading.
However, now we want to allow only certain users to be able to add new blog posts or edit existing ones. To do this, we need authentication and authorization.
Authentication to know who is using our application, and authorization to know what roles that user has, and what they should be allowed to do within the application.
In this chapter, ...
