# Authentication vs Authorization

Authentication asks who you are; authorization asks what you're allowed to do. A web app proves who you are once, at sign-in, then remembers you with a cookie on every request after.

![Cheat sheet: Authentication vs Authorization](https://fsdtrainingmedia.blob.core.windows.net/public/images/2026/11/4f65e786307447c6919c05f8d865ce18.webp)

- Category: ASP.NET Core
- Level: Apprentice
- Tags: aspnet-core, Authentication, Authorization, Cookie, Cookie Authentication, web-development
- Updated: November 3, 2026

Source: https://www.ask-codey.com/cheat-sheets/security-and-sessions-authentication-vs-authorization-cheat-sheet