Authentication
BackendEstablishing who someone is.
Proving identity: a password, a magic link, a sign-in with another provider. Distinct from authorization, which is about permission. Getting these confused is the source of a very common security hole.
See also Authorization, Session, OAuth