Q1. What is the difference between OAuth 2.0 and OIDC?
OAuth 2.0 is an authorization framework for delegated access. It lets a user grant a third-party application limited access to a resource without sharing the password, an...
Technical Question Bank · Peer-Reviewed
Job Interview Questions and Answers Directory
Search and filter frequently asked interview questions across technical, programming, and behavioral domains. Tailor your interview preparation by difficulty for freshers or experienced developers (4 available).
Active:
Tag: oauth2 ×
Q2. Explain the OAuth 2.0 authorization code flow with PKCE.
It is the recommended flow for web, mobile and single-page applications. 1. The client generates a random `code_verifier`, hashes it to a `code_challenge`, and redirects ...
Q3. What is the difference between an access token and a refresh token?
An access token is short-lived, typically minutes, and is presented to APIs to authorize requests. If it leaks, the exposure window is small. It is usually a JWT so resou...
Q4. How would you design machine-to-machine authentication?
For service-to-service calls, avoid shared static credentials and long-lived secrets. - OAuth 2.0 client credentials: each service is a registered client with a client id...