Question 1

What is the main difference between JWT tokens and traditional server sessions?

Accepted Answer

JWT tokens are stateless (no server-side state) and contain all necessary information encoded within the token itself. Unlike traditional sessions that store data in memory or database server-side with only a session ID client-side, JWT shifts storage responsibility to the client. This facilitates horizontal scaling as no shared state is required between servers.

Question 2

What are the three parts of a JWT token separated by dots?

Accepted Answer

A JWT consists of three Base64URL-encoded parts separated by dots: Header (algorithm and type), Payload (claims/data), and Signature (integrity verification). The structure is header.payload.signature. The header indicates the signing algorithm (HS256, RS256), the payload contains claims (iss, sub, exp), and the signature ensures the token hasn't been tampered with.

Question 3

Which standard JWT claim defines the token expiration timestamp?

Accepted Answer

The 'exp' (expiration time) claim defines the Unix timestamp after which the token should no longer be accepted. Standard claims also include 'iss' (issuer), 'sub' (subject), 'aud' (audience), 'iat' (issued at), and 'nbf' (not before). Validating the exp claim is crucial to limit token validity duration and reduce the impact of a stolen token.

Security & Authentication

What is the main difference between JWT tokens and traditional server sessions?

Câu trả lời

What are the three parts of a JWT token separated by dots?

Câu trả lời

Which standard JWT claim defines the token expiration timestamp?

Câu trả lời

What is the main difference between HS256 and RS256 for signing JWTs?

How to revoke a JWT before its natural expiration?

Các chủ đề phỏng vấn Go khác

Go Basics

Go Data Structures

Go Interfaces

Error Handling

Goroutines Basics

Channels

Go Modules

HTTP Server

HTTP Client

JSON Encoding

database/sql

Context Package

Testing

Concurrency Patterns

Sync Primitives

Go Web Frameworks

REST API Design

gRPC

Reflection

Memory Management

Performance Optimization

Generics

Go Design Patterns

Microservices

Docker & Containerization

Kubernetes Basics

Advanced Go

CLI Development

Nắm vững Go cho lần phỏng vấn tiếp theo