Authentication

Problem

Someone requests: GET /my-bank-account Before returning anything, the system needs to answer: Who are you?

Solution — Authentication

The user proves an identity using some accepted mechanism—password, passkey, certificate, authenticator, etc. 
Claimed identity
      +
Proof
      ↓
Authenticated identity
Core idea: authentication establishes who the system believes you are.