Authentication · interview question
In the context of stateless JWT tokens, what is the role of the signature?
Multiple choiceMediumchapter-17-curatedpremiumauthenticationsalting-and-bcrypt
Answer and explanation
Correct answer
D. To verify the integrity and authenticity of the token.
Why
The signature in a JWT token verifies the integrity and authenticity of the token. The server can use the signature to ensure that the token has not been tampered with and was indeed issued by a trusted source.
Test yourself on Authentication
A free test with instant, explained results. No account needed.
More Authentication questions
- In the context of JWT, what is the primary purpose of the signature?
- How can a Java developer verify the signature of a JWT using HMAC SHA-256?
- How would you explain a significant consequence of using stateless JWT tokens for authentication in an interview?
- Which statement about JWT payloads is correct?
- Which statement best describes the use of CSRF tokens in web applications?
- Why is using BCrypt preferable over a fast hashing algorithm like SHA-256 for password hashing?