S&P Global interview question

Authentication and authorization in web api