OWASP Vulnerabilities · interview question
Which part of a JWT ensures data integrity and authenticity?
Multiple choiceMediumchapter-17-curatedpremiumowasp-vulnerabilitiessql-injection
Answer and explanation
Correct answer
B. Signature
Why
The Signature part of a JWT ensures data integrity and authenticity by verifying that the token has not been altered after it was issued. It is created using the header and payload, along with a secret key.
Test yourself on OWASP Vulnerabilities
A free test with instant, explained results. No account needed.
More OWASP Vulnerabilities questions
- How would you explain a potential consequence of not using prepared statements in SQL queries in an interview?
- In the context of JWTs, what is the risk of not validating the 'alg' field in the header?
- Why is it important to validate the 'exp' claim in a JWT?
- How does the Spring Security filter chain protect against SQL Injection?
- How would you explain a potential risk of not using CSRF tokens in web applications in an interview?
- What does 'stateless' imply in the context of JWT?