Flashcards

Quick study sessions to strengthen memory and retain key concepts.

Flashcard Study

Java: JSON Web Tokens (JWT)

Front

How does HTML encoding prevent stored XSS?

It converts special characters to HTML entities. HTML encoding transforms special characters like ``, and `&` into their…

View Card →
Flashcard Study

Java: JSON Web Tokens (JWT)

Front

Why does salting in password storage matter in this design?

Salting adds unique data to passwords before hashing. Salting involves adding random data to passwords before hashing them.…

View Card →
Flashcard Study

Java: JSON Web Tokens (JWT)

Front

What are common mistakes in managing JWT expiration?

Not setting or checking expiration times. Frame the concept in practical terms so you can explain it during…

View Card →
Flashcard Study

Java: JSON Web Tokens (JWT)

Front

How does a server verify a JWT's authenticity?

It uses the Signature to verify the token's integrity. The Signature part of a JWT is created using…

View Card →
Flashcard Study

Java: JSON Web Tokens (JWT)

Front

Why are Stateless JWTs preferred in microservices?

Stateless JWTs remove the need for server-side session storage. With Stateless JWTs, each token contains all the necessary…

View Card →
Flashcard Study

Java: JSON Web Tokens (JWT)

Front

How do parameterized queries prevent SQL Injection?

They treat user input as data, not code. Frame the concept in practical terms so you can explain…

View Card →
Flashcard Study

Java: JSON Web Tokens (JWT)

Front

How can JWTs help mitigate JVM Heap memory issues?

By eliminating server-side session storage. Using JWTs reduces memory consumption because they don't require server-side storage like traditional…

View Card →
Flashcard Study

Java: JSON Web Tokens (JWT)

Front

Why can not managing JWT expiration correctly become a real problem?

It can lead to unauthorized access. Frame the concept in practical terms so you can explain it during…

View Card →
Flashcard Study

Java: JSON Web Tokens (JWT)

Front

Why is CSRF token important in forms?

It prevents unauthorized requests. Frame the concept in practical terms so you can explain it during interview discussion.…

View Card →
Flashcard Study

Java: JSON Web Tokens (JWT)

Front

How would you explain a Stateless JWT in an interview?

A JWT that doesn't require server-side storage. Stateless JWTs contain all necessary information within the token itself, avoiding…

View Card →