API API Authentication and Security

Question 1

What does JWT stand for?

Accepted Answer

JSON Web Token

Answer

JWT stands for JSON Web Token, a compact, URL-safe token format used for securely transmitting information between parties.

Question 2

Which part of a JWT contains the claims about the entity?

Accepted Answer

Payload

Answer

The payload section of a JWT contains the claims, which are statements about the entity (typically the user) and additional metadata.

Question 3

What is OAuth 2.0 primarily used for?

Accepted Answer

Delegated authorization to APIs

Answer

OAuth 2.0 is an authorization framework that enables applications to obtain limited access to user accounts on third-party services.

Question 4

Which HTTP header is used to send a Bearer token in API requests?

Accepted Answer

Authorization

Answer

Bearer tokens are sent in the Authorization header using the format 'Authorization: Bearer <token>'.

Question 5

What is an API key?

Accepted Answer

A unique identifier passed with requests to authenticate the client

Answer

An API key is a unique identifier passed in requests to authenticate the calling application or user.

API - Testing Practice Test