Java: JSON Web Tokens (JWT)
How does HTML encoding prevent stored XSS?
It converts special characters to HTML entities. HTML encoding transforms special characters like ``, and `&` into their…
View Card →Quick study sessions to strengthen memory and retain key concepts.
How does HTML encoding prevent stored XSS?
It converts special characters to HTML entities. HTML encoding transforms special characters like ``, and `&` into their…
View Card →Why does salting in password storage matter in this design?
Salting adds unique data to passwords before hashing. Salting involves adding random data to passwords before hashing them.…
View Card →What are common mistakes in managing JWT expiration?
Not setting or checking expiration times. Frame the concept in practical terms so you can explain it during…
View Card →How does a server verify a JWT's authenticity?
It uses the Signature to verify the token's integrity. The Signature part of a JWT is created using…
View Card →Why are Stateless JWTs preferred in microservices?
Stateless JWTs remove the need for server-side session storage. With Stateless JWTs, each token contains all the necessary…
View Card →How do parameterized queries prevent SQL Injection?
They treat user input as data, not code. Frame the concept in practical terms so you can explain…
View Card →How can JWTs help mitigate JVM Heap memory issues?
By eliminating server-side session storage. Using JWTs reduces memory consumption because they don't require server-side storage like traditional…
View Card →Why can not managing JWT expiration correctly become a real problem?
It can lead to unauthorized access. Frame the concept in practical terms so you can explain it during…
View Card →Why is CSRF token important in forms?
It prevents unauthorized requests. Frame the concept in practical terms so you can explain it during interview discussion.…
View Card →How would you explain a Stateless JWT in an interview?
A JWT that doesn't require server-side storage. Stateless JWTs contain all necessary information within the token itself, avoiding…
View Card →