Interview question
What is the difference between authentication and authorization in an ASP.NET Core API?
TL;DR
Authentication answers who the caller is by validating credentials and producing a principal. In an ASP.NET Core API, a JWT bearer handler validates the token signature, issuer, audience, lifetime, and related scheme rules before claims are trusted.
Practice this drill