Explain the difference between authentication and authorization in APIs. How do OAuth 2.0 and JWT work, and when would you use each?

Sample answer preview

## Authentication vs Authorization **Authentication** answers: "Who are you?" **Authorization** answers: "What are you allowed to do?" ``` 1. User logs in with email/password → Authentication 2.