What is the difference between authentication and authorization?

Focus on clearly defining both terms. Start by explaining authentication as the process of verifying a user's identity, typically through credentials like usernames and passwords. Then, transition to authorization, which determines what an authenticated user is allowed to do within a system, such as accessing specific resources or performing certain actions. Use examples to illustrate the difference, such as logging into a bank account (authentication) versus what transactions a user can perform once logged in (authorization). Aim for clarity and precision in your explanations, as this reflects your understanding of fundamental security concepts in product management.