Authentication - Authentication is how we verify the identity of the user trying to access a particular resource, once authentication is performed we know the identity and can perform authorization.
Authorization - Authorization means giving permission to access particular resource/url.