Understanding the difference between authentication and authorization
Authentication and authorization are the two sides of the same security coin. Authentication is the process of obtaining credentials from a user to verify the identity of the user. Authorization is the process of checking the privileges for the user to access specific resources.
Authentication always precedes authorization.
Figure 10.1: Authentication vs Authorization
The preceding image illustrates the difference between authentication and authorization. The left-hand side of the image shows a sample login screen that is used to determine who the user is. The right-hand side of the image shows the list of groups or roles that the user does or does not belong to, which is used to determine what the user can do.
Authentication
Blazor provides the RemoteAuthenticatorView component to make creating the various authentication pages easier. This component persists and controls state across authentication...