Spring Security · interview question
In the context of Spring Security, how does the framework ensure that a request has not been tampered with when using JWT?
Multiple choiceHardchapter-17-curatedpremiumspring-securityspring-security-filter-chain
Answer and explanation
Correct answer
A. By verifying the JWT signature
Why
JWTs include a signature which is used to verify the integrity of the token. Spring Security checks this signature to ensure that the token has not been tampered with, maintaining trust in the identity and claims presented by the JWT.
Test yourself on Spring Security
A free test with instant, explained results. No account needed.
More Spring Security questions
- What HTTP response code does Spring Security typically return for unauthorized requests?
- In a stateless JWT token, what component ensures the token's integrity and prevents tampering?
- How does Spring Security handle a request identified as a potential CSRF attack?
- Why is separating authentication from authorization important in a real system?
- What does Spring Security's Authentication Filter primarily do?
- In the context of BCrypt, what does increasing the work factor achieve?