jwt
AI security interview questions tagged jwt, across every topic.
3 questions · 1 unlocked for you
Concepts behind "jwt"
Explanations of the mechanisms these questions rely on.
Foundational
Sessions, Cookies and TokensA session links later requests to authenticated state. Compare opaque identifiers, signed tokens, cookie protections and sender constraints, then test idle expiry, absolute expiry and revocation across caches and accepting services. Identity & Access
Advanced
Validating JWTs SafelyA JSON Web Token is a signed (sometimes encrypted) set of claims, whose safety depends on explicit verifier policy. Safe validation pins the allowed algorithm to each key, selects keys only from the configured issuer's key set, checks the token type, issuer, audience and time claims, treats header fields such as kid and jku as untrusted input, and keeps different token kinds mutually exclusive. Key rotation needs a schedule that accounts for cache lifetimes, token lifetimes and clock leeway. Identity & Access🔒 Premium