Q1. What is the difference between authentication and authorization?
Authentication (authn) establishes who the caller is: verifying a password, a session cookie, a token or a certificate. Authorization (authz) decides what that identified...
Technical Question Bank · Peer-Reviewed
Job Interview Questions and Answers Directory
Search and filter frequently asked interview questions across technical, programming, and behavioral domains. Tailor your interview preparation by difficulty for freshers or experienced developers (5 available).
Active:
Tag: authorization ×
Q2. What is the difference between HTTP 401 and 403?
401 Unauthorized means the request lacks valid authentication credentials. The client should authenticate and retry, and the response should include a `WWW-Authenticate` ...
Q3. Explain the OAuth 2.0 authorization code flow with PKCE.
It is the recommended flow for web, mobile and single-page applications. 1. The client generates a random `code_verifier`, hashes it to a `code_challenge`, and redirects ...
Q4. Compare RBAC and ABAC for authorization.
Role-Based Access Control assigns permissions to roles and roles to users, for example `admin` can delete any order. It is simple to reason about, easy to audit and a goo...
Q5. How do you handle authorization in a GraphQL API?
Authorization belongs in the server layer, never in the client query. Because clients can request any combination of fields, enforce rules at the field and object level, ...