Question library
Questions from real interviews. Drill any of them by voice in a couple of minutes, with an interviewer, a score and feedback.
What's the difference between authentication and authorization? And once a user has logged in, how does the server know who's making a request?JuniorYou have an endpoint, GET /orders/{id}, that requires authorization and returns an order. A security review said there's a hole in it. What's the most likely problem, and how do you close it?Mid-levelDesign an authorization system for a B2B SaaS product where each client company has its own users, roles, and permissions to individual resources.Senior