authentication vs authorization
Authentication :
telling the system who you are
by providing username and password.
Authorization :
things you can do according to who you are
------ few ways of Authorization:
Basic Auth --
providing username and password for each and every request you
make
Token based
generate a long token just one time
and use that for the rest of the request
similar to the visitor tag you get when you go to certain
restricted areas
API KEY ---
Bearer Token --