# Authentication and authorization middleware

**URL:** <https://discourse.laminas.dev/t/authentication-and-authorization-middleware/282>\
**Category:** Contributors\
**Tags:** authentication, authorization, middleware\
**Created:** [September 14, 2017, 4:45pm UTC](https://discourse.laminas.dev/t/authentication-and-authorization-middleware/282 "2017-09-14T16:45:16Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![enrico](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.laminas.dev/enrico/32/12_2.png) [@enrico](https://discourse.laminas.dev/u/enrico)\
**Post date:** [September 14, 2017, 4:45pm UTC](https://discourse.laminas.dev/t/authentication-and-authorization-middleware/282/1 "2017-09-14T16:45:16Z")

</div>

I proposed two RFCs about [authentication](https://discourse.zendframework.com/t/rfc-authentication-module-for-expressive-and-psr-7-apps/273) and [authorization](https://discourse.zendframework.com/t/rfc-authorization-module-for-expressive-and-psr-7/239/20).

I realized there are many components involved in the usage of these 2 modules, so I decided to create a diagram to show in details the workflow of these 2 expressive modules.

Here the diagram (click to zoom the image):

![authentication_authorization_middleware](https://canada1.discourse-cdn.com/flex032/uploads/zendframework/original/1X/317019e64903093b2278237f6a5a728412b34199.png)

I hope this diagram will help to clarify the two RFCs.