Send Signature Service Authentication with airSlate SignNow

Authenticate byline request

hello and welcome I'm logoff and today I'm going to explain you the difference between authentication and authorization in a very simple and easy way and I will also explain you why in terms of API or web services we always see authorization and not authentication whether you see the headers of a API request you will always find authorization if you go to some API testing tools or API tools like postman soap UI you will always have a section for authorization and not authentication why is it so so that is what I'm going to explain to you so before I go there let us first understand what is authentication and what is authorization so authentication is of validating a user or a service for example let us take a very simple example let us say somebody comes to your home you are here your doorbell you open your door and you find somebody who you know may be your friend or some guests that you know you will allow them or allow him or her inside your home so this is authentication you have allowed a person because you know him you have validated the credentials and you have allowed the person inside your home so he is authenticated to enter your home now he can use your drawing-room he can watch TV he can use the restrooms and he's authorized to do all this but if he goes to your bedroom or if he goes to your kitchen and opens your refrigerator you will tell him you are not supposed to be in this area or you are not authorized to access this area or this resource so this is authorization that he he has been authenticated so he is allowed to enter but after entering your home he is authorized to go into some areas and not authorized to access some other areas so this is what authorization is or let us take a very simple example of a website when you enter a website and when you login with your username and password you are authenticated and you can enter the website but then after entering after authentication you can access some sections but you may not be able to access some other sections which are like admin sections or some other sessions which your user or you as a person are not authorized to so this is a very base difference between authentication and authorization so authentication is who you are and authorization is what can you do or what access to you have so this is a very basic difference now after understanding this let us go to the API e-world and let us understand why do we always see authorization we see authorization headers we see authorization section and not authentication and this is because if you look at the API send particularly REST API is the URL that we provide to accessor API it is actually your endpoint and it is actually the address to a particular resource of the application so it is an address to a particular resource or of a particular module of the backend or of the application and that is why when you try to access that when you try to run the API of using that particular URL our endpoint you are actually trying to access a particular resource and that is why because you are trying to access a resource it is more appropriate to call it as authorization rather than authentication although authentication will always happen the first step is always identical for example if you are using a basic auth in your API request using a username and password or you are using some other ways like o or token based authorization the first thing is it will check your credentials if your credentials are not correct or you will anyways will not be able to go to the resource but if authentication is done you can directly access that particular resource and that is why it is more appropriate to call it as authorization and that is why we always see authorization and not authentication in terms of api's now if you are somebody who understands better with a you know analog your examples or stories I have a section for stories on my website automation step by step you can read these kind of stories there what is authorization authentication SSO load balancers and so on I will provide a link in the description below this video and I hope now it is very clear to you what is or authentication what is authorization and why do we always see authorization and not authentication in API world I hope this was useful for you thank you for watching