> "Login" doesn't really cover token or key based authentication, i.e. service accounts don't "log in" but do require authentication and authorization To build

> "Login" doesn't really cover token or key based authentication, i.e. service accounts don't "log in" but do require authentication and authorization To build on top of this point, authentication also includes claims that are not tied to an authorization process, such as user agents or custom request headers, and authentication is often used not to reject access but to output subsets of data (I..e, hide fields from a response, send a specific response doc, etc) It's as if the whole industry uses the keyword "auth" for good reasons.