| 1 | What is the difference between authentication and authorization in a Node.js application? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Beginner |
| 2 | How do JWTs, OAuth, and Passport.js fit together in a typical Node.js authentication architecture? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 3 | How does session-based authentication work in a Node.js/Express application, and what does the session store need to handle? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 4 | What is a JSON Web Token (JWT), and what are its three parts? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 5 | What is Passport.js, and how do its 'strategies' provide a consistent authentication abstraction across different methods? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Intermediate |
| 6 | How does the OAuth 2.0 Authorization Code flow work, and what role does Node.js typically play as the client or the resource server? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 7 | How would you implement 'Sign in with GitHub' using Passport's OAuth strategy in an Express application? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 8 | How do you validate a JWT's claims (issuer, audience, expiration) beyond just verifying its cryptographic signature? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Intermediate |
| 9 | What is token introspection, and when is it needed instead of simply verifying a JWT's signature locally? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Advanced |
| 10 | What is PKCE (Proof Key for Code Exchange), and why is it now recommended for OAuth flows even in traditional server-side Node.js applications? Node.js › Authentication & Authorization (JWT, OAuth, Passport) | Node.js | Authentication & Authorization (JWT, OAuth, Passport) | Advanced |
| 11 | How do you implement JWT refresh token rotation in a Node.js API, and why is it more secure than a single long-lived token? Node.js › Authentication & Authorization | Node.js | Authentication & Authorization | Advanced |
| 12 | How would you implement authentication and authorization in a GraphQL API in Node.js, given there's typically only a single HTTP endpoint? Node.js › GraphQL | Node.js | GraphQL | Advanced |
| 13 | How would you implement authentication and authorization in a GraphQL API, given all requests typically go through a single endpoint? Node.js › GraphQL with Node.js | Node.js | GraphQL with Node.js | Advanced |
| 14 | What does the node:crypto module provide, and what's the difference between hashing and encryption? Node.js › Core Node.js Modules | Node.js | Core Node.js Modules | Intermediate |
| 15 | What is the difference between sending SMS via a provider's REST API (like Twilio) versus using SMTP-based email in terms of a Node.js integration? Node.js › Email & Notifications | Node.js | Email & Notifications | Intermediate |
| 16 | What is an API Gateway, and what role does it play in front of a collection of Node.js microservices? Node.js › Microservices Architecture with Node.js | Node.js | Microservices Architecture with Node.js | Intermediate |
| 17 | What is horizontal scaling for a Node.js application, and what specific architectural requirement does it impose? Node.js › Cloud & DevOps | Node.js | Cloud & DevOps | Advanced |