What is authentication and authorization in Web API?

Authentication identifies the caller; authorization determines what that identity may do. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.