The difference between authentication and authorization
summary
Clear distinction: authentication vs authorization means first determine who a user is, then separately decide what that identity can do. The transcript claims claims (signed attributes about a user) are the practical unit for expressing permissions. The company named octo/ octave is described as gluing decades of tech together — from 1970s Kerberos deployments through OpenID Connect/OAuth — used by large enterprises with 20–30 year old stacks and modern cloud apps, and it is presented as working across both.
AI-written summary · about
chapters (4)
- 0:00Start
- 0:14What Do You Think the Biggest Problem Facing Developers Today Is
- 2:16Where Do You See Software Development Going What Do You See in the Future
- 5:47What Should Architects Know about Authentication and Authorization
related talks
05mAre you talking about Auth with and N or a Z?
29mWhy Authorization is Hard
58mImplementing authorization in web applications and APIs
01h 02mImplementing authorization in web applications and APIs
31mAuthentication/Authorization Starters Battle
47mModern Authentication 101
45mThe Future of Authorization in Applications
39mTesting authentication and authorization (AuthN & AuthZ): it’s more than just a login form