Office Hours | Week 09

What does JWT stand for?

• Jumpy Wild Turtle

• Just Wondering Today

• JSON Web Token

• Jolly Web Technology

What is the primary purpose of "cookies" in web applications?

• To store your favorite chocolate chip recipe

• To remember your login session

• To track your sleep schedule

• To store digital fortune cookies

What is the difference between Authentication and Authorization?

• Authentication is for passwords, Authorization is for usernames

• uthentication means your email; Authorization means your browser history

• Both are the same, just different spellings!

• Authentication checks if you’re you; Authorization checks if you can go to the VIP section

Why would you store a JWT token in a cookie?

• Because cookies are delicious

• Because you forgot to clear your browser cache

• To safely store and pass user information in a secure way

• Because cookies are more secure than the cookie monster’s lair

Which of the following is a good practice for storing sensitive data?

• Leave it in a plain text file on your desktop

• Hide it in a locked drawer and forget the key

• Post it on your social media for all to see

• Use environment variables and encryption

Which of these frameworks is used for handling authentication in Node.js applications?

• Passport.js

• Wait-For-It.js

• Random-Guess.js

• I-Can’t-Remember.js

How would you describe RBAC (Role-Based Access Control)?

• You get access based on your favorite pizza topping

• You get access based on your assigned role—like the "Manager" gets the keys to the kingdom

• You get access because you’re just lucky!

• You get access if your username is really cool

How do you make sure only certain people can access a route in your application?

• Put a giant "Do Not Enter" sign on the page

• Throw an error and hope they get scared

• Tell everyone to log out and try again later

• Use JWTs and check user roles with middleware

What’s one reason OAuth is so popular?

• It lets you log in with Google or Facebook so you don't have to remember another password

• It lets you get free pizza with every login

• It’s the magic ingredient for better web app performance

• It doesn’t exist, it’s just a myth!

What is the correct way to store your password in a database?

• Just store it as plain text for easy access

• Encrypt it with bcryptjs to keep it safe

• Store it on a sticky note next to your computer

• Keep it in your pet's diary for safekeeping