Skip to content

Instantly share code, notes, and snippets.

@simonwoo

simonwoo/HTTP认证与授权.md

Last active March 18, 2016 21:08
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save simonwoo/f43806486b1674243d70 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save simonwoo/f43806486b1674243d70 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
HTTP认证与授权.md

认证(HTTP Authentication)

  • verify the identity of the remote user.
  • It is a prerequisite for authorization, it consists of making and enforcing an authorizaiton decision depending on authentication information.
  • most often synonymous with challenge authentication, which means that the server first specifies the type of credentials that it is expecting from the client in order to successfully authenticate subsequent requests. then the client can respond by providing the proper credentials to the server.

授权(HTTP Authorization)

Its function is to grant or deny the request access to the next resource it protects depending on their authentication status and on the action they wish to perform.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment