Authorization is deciding what you can do after you've logged in. Authentication asks who are you, authorization asks what are you allowed to access.
Deciding what you can do after you've logged in. Authentication asks who are you, authorization asks what are you allowed to access.
You're logged in, but only admins can delete users. That's authorization.
The server builds the full HTML page before sending it to the browser. Great for SEO and fast initial loads because users see content immediately instead of a blank screen.
The browser downloads a minimal HTML shell, then JavaScript builds the page. Fast subsequent navigations, but users might see a loading spinner on first visit.
When server-rendered HTML gets "activated" by JavaScript in the browser. The page looks ready instantly, then becomes interactive once the JS loads and attaches event listeners.
A web app that loads once and never does a full page refresh. Navigation feels instant because it just swaps content instead of requesting new HTML from the server.
The traditional web model where each page is a separate HTML document. Click a link, server sends a new page. Simple, reliable, and SEO-friendly out of the box.