Introduction to API authentication and authorization controls
Authentication is the process of validating that a user is who they claim to be. There are various authentication methods being developed every day. Authentication is the crucial process of validating a client’s or user’s identity before granting access to API resources. Most of these methods follow the three authentication principles of what you have, what you are, and what you know:
- What you have primarily refers to authentication methods that require a physical object. Take a key card, for example, or hardware wallets that are used in blockchain.
- What you are applies to those methods that require biometrics of some kind, for instance, a fingerprint scanner.
- What you know is the main method that is used in API authentication and it applies to methods that require a passcode, password, passphrase, and the like.
Authentication involves verifying the provided credentials, such as a username...
