Core Security Lesson: Authentication vs Authorization

Authentication (AuthN) verifies identity ("Is this token truly signed for employee Rahul Sharma?").
Authorization (AuthZ) enforces privilege boundaries ("Does a Senior Systems Engineer have permission to view Board Executive Payroll?").
Attackers exploit systems that properly authenticate a user, but forget to enforce server-side authorization checks on restricted data.