OWASP Vulnerabilities · interview question
Why does a JWT's 'alg' field matter in this design?
Multiple choiceEasychapter-17-curatedpremiumowasp-vulnerabilitiessql-injection
Answer and explanation
Correct answer
C. Specifies the algorithm used for signing
Why
The 'alg' field in a JWT header specifies the algorithm used to sign the token. This helps in verifying the token's signature and ensuring its integrity during authentication.
Test yourself on OWASP Vulnerabilities
A free test with instant, explained results. No account needed.
More OWASP Vulnerabilities questions
- How would you explain a potential consequence of not using prepared statements in SQL queries in an interview?
- In the context of JWTs, what is the risk of not validating the 'alg' field in the header?
- Why is it important to validate the 'exp' claim in a JWT?
- How does the Spring Security filter chain protect against SQL Injection?
- How would you explain a potential risk of not using CSRF tokens in web applications in an interview?
- What does 'stateless' imply in the context of JWT?