Authentication / authorization

Also written: authentication, authorization

Authentication finds out who is calling, and failing it gets a 401. Authorization decides what that caller may do, and failing it gets a 403.