3 ms·
auth is auth. Don't overcomplicate the matter.
by sigg3 5y ago
auth is auth. Don't overcomplicate the matter.
- politician 5y agoAuthentication and Authorization are distinct concepts whose English terms both start with the same prefix.
- nick__m 5y agoThe set of possible Authorization policies without having some form of Authentication is quite limited ;)
- politician 5y agoWithin ABAC schemes, Authorization is a boolean function over (Request, Principle, Environment). If you zero the Principle, you can still represent a large number of unique policies considering just the Request and the Environment.
- krono 5y agoYou would be the one overcomplicating the matter by clumping these distinct concepts together. Edit: For those unfamiliar with the concepts: Authentication: subject identity - is the user who they claim to be? Authorization: subject permissions - is this user permitted to execute that action?
- b0afc375b5 5y agoAuthentication - can you login or not? Authorization - should you be able to see the admin dashboard or not?