OWASP Vulnerabilities · interview question
Why is it important to validate the 'exp' claim in a JWT?
Multiple choiceHardchapter-17-curatedpremiumowasp-vulnerabilitiessql-injection
Answer and explanation
Correct answer
A. To ensure the token has not expired
Why
Validating the 'exp' claim ensures the token is still valid and has not expired, preventing unauthorized access using old tokens. This is crucial for maintaining security and session integrity.
Test yourself on OWASP Vulnerabilities
A free test with instant, explained results. No account needed.
More OWASP Vulnerabilities questions
- How would you explain a potential consequence of not using prepared statements in SQL queries in an interview?
- In the context of JWTs, what is the risk of not validating the 'alg' field in the header?
- How does the Spring Security filter chain protect against SQL Injection?
- How would you explain a potential risk of not using CSRF tokens in web applications in an interview?
- What does 'stateless' imply in the context of JWT?
- How would you explain a critical step in preventing stored XSS attacks in a Java-based web application in an interview?