ZegnatBecause technically, the first step is always the same: communicate with an authorization endpoint to make sure you are you. And the difference is only whether I am asking to proof you are you (authentication) or also asking for some permissions I want you to give me (authorization).
