Authorization Authentication 授权与认证区别

Authorization is the process of granting authority to an authenticated user so that this user is allowed to
access particular resources of the target application. The authorization process must be performed after the
authentication process. Typically, authorities are granted in terms of roles.

authorization 授权
authentication 认证

An authentication provider authenticates a user and returns the authorities granted to this user.