Authentication · interview question
How would you explain a common strategy to mitigate CSRF attacks in a Java web application using JWTs in an interview?
Multiple choiceHardchapter-17-curatedpremiumauthenticationjson-web-tokens-jwt
Answer and explanation
Correct answer
B. Adding a CSRF token to forms
Why
To mitigate CSRF attacks, a CSRF token can be added to forms, ensuring that the request originated from the legitimate client. This token is validated on the server side along with the JWT.
Test yourself on Authentication
A free test with instant, explained results. No account needed.
More Authentication questions
- In the context of JWT, what is the primary purpose of the signature?
- How can a Java developer verify the signature of a JWT using HMAC SHA-256?
- How would you explain a significant consequence of using stateless JWT tokens for authentication in an interview?
- Which statement about JWT payloads is correct?
- Which statement best describes the use of CSRF tokens in web applications?
- Why is using BCrypt preferable over a fast hashing algorithm like SHA-256 for password hashing?