80Identity & securityEssentialCommon trap

Authorization

After identity is confirmed, decides which resources and actions you are allowed.

For example

Even though I am logged in, without authorization I cannot delete someone else's data.

Resources

Copy prompt

Add role-based authorization to these routes and list who is allowed to do what.

Related terms

Disguising yourself as a trusted organisation to trick people into giving up passwords or card numbers.

For example

I got an email pretending to be my bank asking me to click a link — likely phishing.

Confirms who you are and proves you may access a system or resource.

For example

After I log in, the system uses authentication to confirm my identity.