Auth
ELI5 — The Vibe Check
Auth is just the shorthand that developers use for both authentication and authorization combined. When someone says 'the auth system,' they usually mean the whole login/permissions thing — checking who you are AND what you're allowed to do.
Real Talk
Auth is an informal abbreviation used interchangeably for authentication, authorization, or the combination of both. In context, 'auth middleware' typically handles both verifying identity (authentication) and checking permissions (authorization).
When You'll Hear This
"Is the auth set up yet?" / "The auth layer uses JWTs."
Related Terms
Authentication (AuthN)
Authentication is proving you are who you say you are.
Authorization (AuthZ)
Authorization is deciding what you're allowed to do after you've proven who you are.
JWT (JSON Web Token)
A JWT is a special kind of token that contains information inside it. It has three parts: a header, a payload (with your user ID, role, etc.
OAuth (Open Authorization)
OAuth is the system behind 'Login with Google.' Instead of making a new account, you let Google vouch for you.
Session
A session is the server's way of remembering who you are across multiple requests.