简体繁体 English

是认证还是授权？

[英]is this authentication or authorization?

原文 2012-03-02 15:38:43 0 2 c#/ dotnetopenauth

I want to use DotNetOpenAuth to create something like this 我想使用DotNetOpenAuth创建类似这样的东西

Is is authentication or authorization? 是认证还是授权？ Any recommended tutorials? 有推荐的教程吗？

在此处输入图片说明

2 个解决方案

Authentication - You are who you say you are. 身份验证-您就是您所说的人。 Like showing your ID card would mean that you are indeed who you say you are. 就像出示身份证一样，这意味着您确实是您的真实身份。
Authorization - You can access these resources. 授权-您可以访问这些资源。 Knowing who you are, this would be giving (or denying) you access to a building. 知道您是谁，这将使您（或拒绝）您进入建筑物。

In your screenshot you are giving authorization now that you have been authenticated. 在您的屏幕快照中，您已获得身份验证，正在授予授权。

In easy terms: Authentication is the process of determining the identity of the user. 简单来说：身份验证是确定用户身份的过程。 Authorization is the process of determining what a user is allowed to do. 授权是确定允许用户执行的操作的过程。

Typically the result of authorization is based on the result of authentication: you may do X if you are Y. When I log in to StackExchange, the system sees I'm Andre (authentication), so regarding to the rules I'm allowed to create gallery chat rooms (authorization). 通常，授权的结果基于身份验证的结果：如果您是Y，则可以执行X。当我登录StackExchange时，系统会看到我是Andre（身份验证），因此关于允许的规则创建画廊聊天室（授权）。