Chapter 7: Authentication and Authorization in Strapi
In this chapter, we will explore the topic of authentication and authorization in Strapi. We will start the chapter by explaining the difference between admin users and API users. Then, we will see how to work with login and sign-up functionality. Afterward, we will explain how to protect and secure certain API routes from unauthorized access.
The topics we will cover in this chapter are as follows:
- The difference between admin users and API users
- Login and sign-up in Strapi
- Securing API routes
- Roles and permissions
- Working with Strapi policies
- Overview of OAuth providers
By the end of this chapter, you will be able to implement authentication in the API, as well as adding a layer of authorization to prevent unauthorized users from accessing certain areas of the API.
