Authenticating Users

Need for authentication

A web application usually has:

1. A public part
2. A part for known users who are logged in
3. A part that is only accessible to administrators

Public pages will be accessible by so-called anonymous users. For other pages, like a list of previously created orders or a page where the user can edit their profile, these users will need to authenticate first. Authentication refers to establishing the identity of the user. After they provide their username and password, we verify that it is in fact them and not someone else. After all, nobody else is supposed to know someone else’s password.