Authority describes a permitted purchase; a credential allows a payment to happen. The distinction is simple and easily blurred in implementation. Read the full article in Communications of the ACM.
When Software Starts Spending Money, Every API Becomes a Contract
