Search⌘ K
AI Features

Authentication and Authorization

Explore the fundamentals of authentication and authorization in API development with Go. Understand the difference between verifying user identity and controlling access, how to manage users through roles, and implement secure user authentication flows including JWT. This lesson equips you with the skills to secure your APIs by managing user data and access effectively.

Flow summary

We have two types of users in our application:

  1. Administrators are responsible for handling the whole system. They upload and manage the different movies to be reviewed, and manage the users and their activities. Only users assigned the admin role or created as admins can do this.

  2. Movie reviewers are the users who view upcoming movies and review them. After downloading the application, they sign up and create a profile. They can only access the platform contents when they log in.

What are authorization and authentication?

Authentication and authorization are often used interchangeably, ...