Authentication is the process that ensures the identity of a user, usually done by providing a set of identifying credentials (username and password). Authorization is the security process that determines the access levels a user has in the application. In this chapter, we will continue with the development of the login form implemented in Chapter 3, Implementing Server-Side Components with Internationalization, by adding authentication and authorization features. We'll also learn how to implement the remember me option in the login form.
This chapter covers the following topics:
- The HTTP session
- Cookies management
- Authorization and authentication mechanisms