the.com/authorization
Permission wearing a suit, so denial feels like paperwork instead of rejection.
means Official permission or approval for someone to do, use, or access something.
from Traces back to the Greek 'authentes' (one who acts on one's own, a master or doer), which fed into Latin 'auctor' (originator, founder, one who causes to grow — the root of 'author'). From 'auctor' came 'auctoritas' (authority, legitimate power), and medieval Latin built 'auctorizare' on top of that — to invest with authority. French passed it along as 'autoriser' before English borrowed it in the 1500s, bolting on the noun ending '-ation' to name not just the act of authorizing but the stamped, filed, official result of it.
- vs authentication
- authentication proves who you are, this decides what you get
- http code
- 403 means authenticated but still told no
- oauth trick
- lets apps act for you without learning your password
- root cause
- most breaches are authorization bugs, not stolen identities