Explain the difference between authentication and authorization during web testing? | Web Services Testing Interview Questions

Authentication is the process with which the system identifies the user. The goal is to ensure that the user is indeed a user, who he claims to be. There are different types of authentications, which can be used like password based authentication, device based authentication, etc. On the other hand, authorization is the process after the authentication process. In this process the system will decide whether a particular task can be performed by the user, does he have the necessary permissions, etc.