Popular Authorization Articles

API authentication verifies who or what is making a request. API authorization determines what that authenticated identity is allowed to do. They are related security layers, but they solve different problems and should be designed independently.