Multiple ChoiceBeginner 45s
Session vs JWT trade-off
You need instant global logout for a security incident. Which token approach makes revocation easiest?
Options
- 1Long-lived self-contained JWTs with no introspection
- 2JWTs signed with a 10-year expiry
- 3Opaque server-side sessions looked up in a shared store
- 4Stateless JWTs cached in the browser only
Think you can answer under pressure?
Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.