These mechanisms ensure that users are authorized to access specific resources over the web via APIs.