What is the difference between Authentication and authorization?
This is a tricky question. These two concepts seem altogether same but there is big difference. The Authentication verifies the identity of a user while Authorization is process where we check does this identity have access rights to the system or not. In brief we can say the the authentication is the process of obtaining some sort of credentials from user and using those credentials to verify the user's identity. The Authorization is the process of allowing an authenticated user access to resources. The Authentication always proceed to Authorization; even if your application lets anonymous users connect and use
The application, it yet authenticates them as being anonymous.