200-301 · Question #1070
Which definition describes JWT in regard to REST API security?
The correct answer is C. an encoded JSON token that is used to securely exchange information. A JWT (JSON Web Token) is an encoded JSON object that is digitally signed to securely exchange information, commonly used to convey authentication and authorization claims between parties.
Question
Which definition describes JWT in regard to REST API security?
Options
- Aan encrypted JSON token that is used for authentication
- Ban encrypted JSON token that is used for authorization
- Can encoded JSON token that is used to securely exchange information
- Dan encoded JSON token that is used for authentication
How the community answered
(22 responses)- A5% (1)
- C91% (20)
- D5% (1)
Why each option
A JWT (JSON Web Token) is an encoded JSON object that is digitally signed to securely exchange information, commonly used to convey authentication and authorization claims between parties.
While JWTs can be encrypted (JWE), they are fundamentally encoded and signed, not inherently encrypted, and are used for information exchange, not solely authentication.
JWTs are primarily encoded and signed, not inherently encrypted, and while used for authorization context, their broader purpose is secure information exchange.
A JWT is an encoded (typically Base64 URL-safe) JSON object containing claims that can be digitally signed for integrity, allowing for the secure exchange of information between parties, often used for authentication and authorization without needing encryption.
JWTs are encoded JSON tokens, but their purpose extends beyond just authentication to include secure information exchange that can facilitate both authentication and authorization.
Concept tested: JSON Web Token (JWT) purpose and characteristics
Source: https://jwt.io/introduction/
Topics
Community Discussion
No community discussion yet for this question.