Authentication · interview question
In the context of JWT, what is the primary purpose of the signature?
Multiple choiceEasychapter-17-curatedpremiumauthenticationsalting-and-bcrypt
Answer and explanation
Correct answer
C. To verify the token's authenticity.
Why
The signature in a JWT is used to verify that the token has not been altered and is authentic. It is created using the header and payload, along with a secret key, ensuring the data's integrity.
Test yourself on Authentication
A free test with instant, explained results. No account needed.
More Authentication questions
- How can a Java developer verify the signature of a JWT using HMAC SHA-256?
- How would you explain a significant consequence of using stateless JWT tokens for authentication in an interview?
- Which statement about JWT payloads is correct?
- Which statement best describes the use of CSRF tokens in web applications?
- Why is using BCrypt preferable over a fast hashing algorithm like SHA-256 for password hashing?
- Which aspect of JWT usage can lead to vulnerabilities if not properly managed?