Authorisation
Checking what you're allowed to do once we know who you are
Words that go with it
- AccountA record of one person: email, password hash and a unique user ID
- Authentication (auth)Proving who you are, for example by signing in
- CookieA small named note a website keeps in your browser, sent back with every request
- Guest checkoutOrdering without an account, as Adjoa's customers do
- HashA password run through a one-way scrambler; it can be checked but never reversed
- Refresh tokenA second token that lets the app get a fresh session token without signing in again
- SessionProof that you signed in, valid for a while
- Sign-upsThe ability for anyone to create a new account. You'll switch it off
- Supabase AuthThe part of Supabase that stores accounts and signs people in
- TokenThe signed string at the heart of a session: who you are and until when