Authorization
Context can include the user’s roles and attributes, resource metadata (such as sensitivity or owner), and environmental details like device type, IP address, geolocation, and time of day. Successful authentication establishes a trusted identity and often produces a token or session identifier that represents that identity for subsequent requests. Policies contain the rules and logic …