Spring Security · interview question
After the filter chain authenticates a request, where should an order-ownership rule usually be enforced?
Multiple choiceHardchapter-17-curatedpremiumspring-securityfilter-chain
Answer and explanation
Correct answer
C. Near the protected business action, where the current order facts are available
Why
The filter chain can authenticate the caller up front, but the application still needs business-aware authorization where it has access to order ownership, status, tenant, or workflow details.
Test yourself on Spring Security
A free test with instant, explained results. No account needed.
More Spring Security questions
- What HTTP response code does Spring Security typically return for unauthorized requests?
- In a stateless JWT token, what component ensures the token's integrity and prevents tampering?
- How does Spring Security handle a request identified as a potential CSRF attack?
- Why is separating authentication from authorization important in a real system?
- What does Spring Security's Authentication Filter primarily do?
- In the context of BCrypt, what does increasing the work factor achieve?