This is a widespread problem, and it’s well known. One common solution, using the terms “authn” and “authz”, doesn’t solve the problem. And this isn’t just confusing, it leads to bad abstractions and general failures!

Source: Instead of “auth”, we should say “permissions” and “login” - nicole@web