Authentication vs authorization, sessions vs tokens

What you take away

• Authentication proves who you are; authorization decides what you may do — and the second has to be checked per object, not once at the edge.

And 3 more inside the class, in Pro.

How the class is laid out

1. The problem
2. The simple version
3. Where the truth lives
4. Authorization is the one that gets skipped
5. Check your understanding