Skills101
← All practice quizzes

Quiz: JWT and API Security

5 questionsNo time limitPass: 60%+10 XP on first pass

Build and verify a JWT by hand in Python to see exactly what it protects (integrity) and what it doesn't (secrecy), avoid the classic JWT mistakes, and secure APIs with validation, rate limits and safe error handling.

Log in to take the quiz

Free account · see your score, answers and explanations, earn XP

  1. Question 1

    What does the signature of a JWT guarantee?

  2. Question 2

    Why did the forged token in the demo fail?

  3. Question 3

    How should a server defend against the "alg": "none" attack?

  4. Question 4

    Which is a good place to store a session token in a browser app to limit XSS theft?

  5. Question 5

    What HTTP status code means "too many requests" from rate limiting?