Authentication: Sessions, JWT & OAuth

Sessions vs tokens, JWTs and revocation, refresh token rotation, OAuth 2.0, OIDC, SSO, and mTLS.

0 / 8 solved
0/8 solved
Question Tags Difficulty Success
1. Redis Goes Quiet
jwtsession-cookie +1
Easy —
2. Someone Else's URL Scheme
pkceauthorization-code-flow +1
Medium —
3. Right Signature Wrong Ear
jwttoken-validation +2
Medium —
4. One Step Off Spec
oauth2pkce +2
Medium —
5. Forty Thousand Refreshes
jwttoken-revocation +2
Medium —
6. Rotation Buys Detection
oauth2refresh-token-rotation +2
Medium —
7. Before You Trust the Claims
jwttoken-validation +1
Hard —
8. Header Picks The Key
jwtalgorithm-confusion +2
Hard —

Learning Resources

Up next

8 of 8 questions here are still unsolved.