Skip to content

Commit

Permalink
fix
Browse files Browse the repository at this point in the history
  • Loading branch information
damienbod committed Jan 9, 2025
1 parent db708d4 commit 4682a82
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ This article covers the following areas:

## Authentication v Authorization

Bearer tokens are often treated as an authentication mechanism, but in practice, they used primarily for authorization. Authentication occurs when a user first requests an access token in the UI layer. When the token is presented to an API, the process is more accurately described as *delegated authorization*. Because the token itself does not reveal who or what obtained it or how it was issued, the API can only confirm whether the token is valid for calling the requested resource.
Bearer tokens are often treated as an authentication mechanism, but in practice, the tokens are used primarily for authorization. Authentication occurs when a user first requests an access token in the UI layer. When the token is presented to an API, the process is more accurately described as *delegated authorization*. Because the token itself doesn't reveal who or what obtained it or how it was issued, the API can only confirm whether the token is valid for calling the requested resource.

## Token types

Expand Down

0 comments on commit 4682a82

Please sign in to comment.