Who are you, and what may you do? See 401 vs 403 on a small API, then follow an OAuth flow and an OpenID Connect login to see which token answers which question. This interactive lesson needs JavaScript.
