In reality, most of the applications are using it for authentication: to identify who you are using your GitHub, FaceBook or Google account. Authorization is t

In reality, most of the applications are using it for authentication: to identify who you are using your GitHub, FaceBook or Google account. Authorization is the process of determining whether the identity can perform the specified action on the specified data [0]; such social logins provide close to no real options to users to specify this aspect. 0: https://aspsecuritykit.net/guides/designing-activity-based-data-aware-authorization/ https://aspsecuritykit.net/guides/designing-activity-based-d...