Challenge 2 / 2

Authentication checks what pages exist in your app, and authorization checks if your database is connected correctly.

Authentication and authorization are basically the same thing: both mean “you’re logged in”, and roles don’t really change what you can access.

Authentication is proving who you are (like logging in). Authorization is deciding what you’re allowed to do after that (like whether you can open the admin area).

Authentication is giving people roles like admin or user. Authorization is the login step where you type your password.