authentication vs authorization
Authentication : telling the system who you are by providing username and password. Authorization : things you can do according to who you are ------ few ways of Authorization: Basic Auth -- providing username and password for each and every request you make Token based generate a long token just one time and use that for the rest of the request similar to the visitor tag you get when you go to certain restricted areas API KEY --- Bearer Token --