Authentication versus Authorization

It is always difficult to me define authentication versus authorization. So now and forever I’l write it down to myself.

  1. Authentication: It is a process of verification that verifies “Who you are” (it confirms that you are a valid (or invalid) user).
  2. Authorization: It is a process of verification that verifies “What to do” (It confirms you are permissible to do (or not to do) that).

source from http://www.c-sharpcorner.com/UploadFile/56fb14/custom-authorization-in-mvc/