Build
Authorization vs authentication: logged in isn't the same as allowed
Lesson 5 of who are you: the app knows who you are. That's a different question from what you're allowed to touch. The gap between the two is where data leaks.
Sam Ortega · 1h ago · 4 min