Module 06 Glossary · Authentication & Security

Topic Glossary

ENGLISH TERM	中文	SIMPLE ENGLISH	中文小白理解
Authentication	身份认证	Checking who a user or system is.	检查用户或系统到底是谁。
Authorization	授权	Checking what an identity is allowed to do.	检查这个身份可以执行哪些操作。
Credential	凭证	Information used to prove an identity.	用来证明身份的信息。
Session	会话	State that remembers a verified identity across requests.	让系统在多次请求之间记住已验证身份的状态。
Token	令牌	A protected value that represents identity or access.	代表身份或访问权的一段受保护信息。
JWT	JSON Web Token	A compact, signed token format that carries claims.	一种携带声明、可以签名的小巧令牌格式。
Role	角色	A named set of responsibilities or permissions.	一组被命名的职责或权限。
Permission	权限	A rule that allows or denies a specific action.	允许或拒绝某个具体操作的规则。
Secret	机密信息	Private information that must not be exposed.	不能公开或泄露的私密信息。
Least Privilege	最小权限	Giving a caller only the access required for its task.	只给调用方完成任务所必需的最少权限。