recently i have a look at this interesting jaas ...
 

recently i have a look at this jaas(Java Authentication and Authorization) ... but i not sure is it still being generally used ?? i mean sunken into oblivion for there are probably some newer/better/updated stuffs ... and also ... what *exactly* is the difference between authentication and authorization , is there such a thing as in which came before which ??


//thanks a advance ...

.

Authentication is the process of confirming that someone is who they say they are, typically via a username password pair, although that is certainly not the only means of authentication.

Authorisation is the process of determining what the authenticated person can do, such as view some data, change the data etc. Sometimes called permissions.

so normally i will take it as Authentication first then Authorisation ??


.

Yes, the program will need to know with whom it is dealing with before it is able to decide what they are permitted to do.

ok ...


.