| 1 | What are JWT claims, and how do you add custom claims when issuing a token? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 2 | How does token revocation work with stateless JWTs, given they can't simply be 'deleted' server-side once issued? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 3 | How does token validation work under the hood when the JwtBearer middleware receives a request, and what checks does it perform? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 4 | How does JWT (JSON Web Token) authentication work at a high level in ASP.NET Core? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 5 | What are the security risks of storing JWTs in browser localStorage versus HttpOnly cookies? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Intermediate |
| 6 | How do JWTs, OAuth, and Passport.js fit together in a typical Node.js authentication architecture? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 7 | How do you validate a JWT's claims (issuer, audience, expiration) beyond just verifying its cryptographic signature? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 8 | How does ASP.NET Core support multiple authentication schemes simultaneously (e.g., cookies for a web UI and JWT for an API in the same application)? .NET › Authentication & Authorization (Identity, JWT, OAuth) | .NET | Authentication & Authorization (Identity, JWT, OAuth) | Advanced |
| 9 | What is token introspection, and when is it needed instead of simply verifying a JWT's signature locally? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Advanced |
| 10 | What is a JSON Web Token (JWT), and what are its three parts? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |