Q1. Session-based versus token-based authentication: what are the trade-offs?
Session-based authentication stores session state on the server and gives the client an opaque session identifier in a cookie. It is easy to revoke (delete the session), ...