Glossary term
What is AuthZ (Authorization)?
AuthZ stands for Authorization.
Decides what you're allowed to do. Example: You can see your invoices, not other people's.
Learn it properly · System DesignLesson 49: Authentication vs Authorization: Sessions, Cookies & JWTEvery endpoint checked “is the user logged in?” — and changing one number in the URL showed another customer's invoice. Authentication vs authorization, storing passwords, MFA and passkeys, sessions vs JWTs (with a live token to tamper with), and RBAC, ABAC and ReBAC.