Authentication and Authorization for RESTful APIs: Steps to Getting Started
Authentication confirms that you are who you say you are, whereas authorization checks if you have permission to access a given resource. When working with REST APIs, it's important to keep security in mind from the beginning.